Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

How we Rooted Copilot - 1711

Vaisha Bernard - Eye SecurityPosted 1 Year Ago

A Novel Technique for SQL Injection in PDO’s Prepared Statements- 1710

Adam Kues - SearchlightPosted 1 Year Ago

How We Gained Full Access to a $100M Zero-Trust Setup - 1709

How We Gained Full Access to a $100M Zero-Trust Setup Posted 1 Year Ago

RCE in the Most Popular Survey Software You’ve Never Heard Of- 1708

Adam Kues - SearchlightPosted 1 Year Ago

Why Careful Validation Matters: A Vulnerability Originating in Inline Assembly- 1707

SherlockPosted 1 Year Ago

Pwning Solana for Fun and Profit - Exploiting a Subtle Rust Bug for Validator RCE and Money-Printing- 1706

AnatomistPosted 1 Year Ago

LET ME COOK YOU A VULNERABILITY: EXPLOITING THE THERMOMIX TM5 - 1705

Baptiste Moine - SynAckTiv Posted 1 Year Ago

Apps shouldn’t let users enter OpenSSL cipher-suite strings - 1704

Frank DENISPosted 1 Year Ago

Corruption via MathSpace on Firefox Browser- 1703

Manfred Paul - ZDI post by Hossein LotfiPosted 1 Year Ago

Boredom Over Beauty: Why Code Quality is Code Security- 1701

John Saigle - Asymmetric Research Posted 1 Year Ago