📁 blog
- 📄 LLVM Adventures: Fuzzing Apache ModulesMar 21, 2026
- 📄 FortMajeure: Authentication Bypass in FortiWeb (CVE-2025-52970)Aug 13, 2025
- 📄 FortiWeb Pre-Auth RCE (CVE-2025-25257)Jul 10, 2025
- 📄 Android's CVE-2022-20201 (InstalldNativeService)Dec 12, 2024
- 📄 Android's CVE-2020-0401 (PackageManagerService)Dec 1, 2024
- 📄 Android's CVE-2020-0238 (AccountTypePreferenceLoader)Nov 26, 2024
- 📄 Pwning LLaMA.cpp RPC ServerOct 3, 2024
- 📄 Reverse Engineering a Kernel Driver challSep 22, 2024
- 📄 Hunting bugs in Nginx JavaScript engine (njs)May 24, 2024
- 📄 GenesisOS: Publishing my micro-kernel!Apr 22, 2024
- 📄 Exploiting n-day in Home Security CameraJan 5, 2024
- 📄 Pwning mjs for fun and SBXMar 8, 2023
- 📄 LuaJIT Sandbox Escape: The Saga EndsDec 30, 2022
- 📄 LuaJIT Internals(Pt. 3/3): Crafting ShellcodesSep 27, 2022
- 📄 LuaJIT Internals(Pt. 2/3): Fighting the JIT CompilerSep 13, 2022
- 📄 LuaJIT Internals(Pt. 1/3): Stepping into the VMAug 23, 2022
- 📄 LuaJIT Internals: IntroAug 22, 2022
- 📄 Discovering a 2-year old priv-esc in Redis(CVE-2022-24735)Jul 19, 2022
- 📄 Fuzzing with AFL | Part 2: Trying Smarter(Apache)Mar 12, 2022
- 📄 Fuzzing with AFL | Part 1: Trying Harder(Redis)Mar 10, 2022
- 📄 Compiling/Debugging ApacheNov 1, 2021
- 📄 Hacking Apache servers like it's 2004 (CVE-2021-41773)Oct 31, 2021
- 📄 Loading an ELF without the execve syscallSep 20, 2020
- 📄 Firebase Applications – The Untold Attack SurfaceSep 14, 2020
- 📄 Research Publication: Pwning PHP7 Internals (Zend engine)Aug 22, 2020
- 📄 Reverse Engineering Jazz Jackrabbit 2Jul 14, 2020
- 📄 Hacking GraphQL ApplicationsDec 13, 2019
📁 ctf-writeups
- 📄 BSidesTLV 2025 - 'ArraySwap' writeup (pwn)Dec 12, 2025
- 📄 BsidesTLV 2023 - 'Zen(d) Master' writeup (pwn)Jun 1, 2023
- 📄 INTENT-CTF 2022: PwnMe writeupDec 17, 2022
- 📄 LibJS exploitation: 'broobwser' writeupDec 8, 2022
- 📄 Pwning C++: placemat writeupOct 30, 2022
- 📄 MatrixCTF 2022 - 'Mirror' writeup(pwn)Jul 6, 2022
- 📄 TamilCTF - Pwn challs solutionsOct 1, 2021
- 📄 BSidesTLV CTF 2021 - 'Rainy Redis' writeup (pwn)Sep 19, 2021
- 📄 ICHSA CTF 2021 - 'Epic Game' writeup (pwn)Jun 5, 2021
- 📄 OMH CTF 2021 - 'Framed' writeup (pwn)Jun 4, 2021
- 📄 Matrix CTF 2021 - 'Agent Man' writeup (Android)Apr 2, 2021
- 📄 Matrix CTF 2021 - 'Roulette' writeup (pwn)Apr 2, 2021
- 📄 Shabak CTF 2021 - 'BabyRISC' writeup (pwn)Feb 10, 2021
- 📄 XMAS CTF 2020 - 'lil wishes db' writeup (pwn)Dec 19, 2020
- 📄 boot2root CTF 2020 - 'Canned' writeup (pwn)Dec 8, 2020
- 📄 perfect-blue CTF 2020 - 'Amazing ROP' writeup (pwn)Dec 7, 2020
- 📄 perfect-blue CTF 2020 - 'Apoche' writeup (web)Dec 7, 2020
- 📄 perfect-blue CTF 2020 - 'Sploosh' writeup (web)Dec 7, 2020
- 📄 Dragon CTF 2020 - 'Harmony Chat' writeup (web)Nov 27, 2020
- 📄 JISCTF 2020 - 'Ransomware' writeup (rev)Nov 24, 2020
- 📄 KAF CTF 2020 - 'SSE_KEYGENME' writeup (rev)Nov 14, 2020
- 📄 NACTF 2020 - 'Format' writeup (pwn)Nov 13, 2020
📄 AboutJan 1, 111
📄 ProjectsJan 1, 111

Graph View

Backlinks