Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

Parser Bugs of the Year- 1424

LangSecPosted 1 Year Ago

Abusing URL Parsing Confusion to Exploit XXE on SharePoint Server and Cloud - 1423

Piotr Bazydlo - ZDIPosted 1 Year Ago

Devfile file write vulnerability in GitLab- 1422

Gitlab SecurityPosted 1 Year Ago

ANSI Escape Injection Vulnerability in WinRAR- 1421

Siddharth DushanthaPosted 1 Year Ago

CVE-2024-23108: Fortinet FortiSIEM 2nd Order Command Injection Deep-Dive- 1420

Zach Hanley - Horizon AIPosted 1 Year Ago

Taking Down Cosmos Chains- 1419

Jacob GadikianPosted 1 Year Ago

The Art of Judging Bug Bounties- 1418

Trust SecurityPosted 1 Year Ago

iframe and window.open magic - 1417

HuliPosted 1 Year Ago

Parallel Code Security: The Challenge of Concurrency- 1416

Stefan Schiller - Sonar SourcePosted 2 Years Ago

High Risk Bug Disclosure: Across Bridge Double-Spend- 1415

iosiro - Jason MatthyserPosted 2 Years Ago