Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

Sonos Era 100 Secure Boot Bypass Through Unchecked setenv() call- 1310

Alex Plaskett - NCC GroupPosted 2 Years Ago

Cookie Bugs - Smuggling & Injection- 1309

Ankur SundaraPosted 2 Years Ago

IppSec Search Engine- 1308

IppSecPosted 2 Years Ago

Tricks for Reliable Split-Second DNS Rebinding in Chrome and Safari- 1307

Daniel Thatcher - Intruder.ioPosted 2 Years Ago

SSH ProxyCommand == unexpected code execution (CVE-2023-51385)- 1306

Vin01Posted 2 Years Ago

codehash check in factory contracts does not account for non-empty addresses- 1305

MiloTruck - Wildcat C4Posted 2 Years Ago

Users using EIP-1271 for signatures can be forced into loans as the wrong party without consent- 1304

MiloTruckPosted 2 Years Ago

A year of Competitive Audits - 1303

MiloTruckPosted 2 Years Ago

Beanstalk's all BEAN can be drained by hacker. Due to bug in convertFacet and LibWellConvert- 1302

BeanstalkPosted 2 Years Ago

Oracle Multithreading- 1301

OraclePosted 2 Years Ago