Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

NGINX Rift: Achieving NGINX Remote Code Execution via an 18-Year-Old Vulnerability - 2057

Zhenpeng (Leo) LinPosted 1 Month Ago

DirtyCBC: When Linux Kernel Decrypt-Before-MAC Turns Authenticated Encryption Into a Page-Cache Write- 2056

Kamil LeoniakPosted 1 Month Ago

Dirty Frag: Universal Linux LPE- 2055

V4BelPosted 1 Month Ago

1-Click GitHub Token Stealing via a VSCode Bug- 2054

Ammar AskarPosted 1 Month Ago

CVE-2026-46640 writeup- 2053

vladko312Posted 1 Month Ago

Storage slot collision leads to loss of funds- 2052

Slowmist AIPosted 1 Month Ago

Force Trigger Safety Checks- 2051

John Scott-RailtonPosted 1 Month Ago

Gravity Bridge $5.4M Denom Mapping Exploit (Explained)- 2050

Quill AuditsPosted 1 Month Ago

How I Made an AI Steal Session Tokens for Me | Zero-Click Cross-Tenant ATO via LLM Output Rendering + IDOR- 2049

FerreirakletPosted 1 Month Ago

Universal XSS in Firefox Focus for iOS via Redirect-Scheme Validation Race Condition- 2048

v12Posted 1 Month Ago