Specialized in low-level vulnerability research, exploit engineering, and offensive security tooling.
DiffRays is a research-oriented tool for binary patch diffing, designed to aid in vulnerability research, exploit development, and reverse engineering.
Detailed analysis of recent patches and N-day vulnerabilities.
Buffer overflow vulnerability in the Net-SNMP library residing in the conditional check of the snmp_input function during parsing of incoming trap messages.
Race condition use-after-free vulnerability in Windows AFD driver (afd.sys) allowing local privilege escalation to SYSTEM.
Out-of-bounds memory read vulnerability in the Windows Common Log File System (CLFS) driver due to insufficient bounds checking in ClfsGetFirstRecord().
This article contains a full breakdown of a stack-based buffer overflow vulnerability found in Sante PACS Server version before 4.2.0 (Credits: Tenable Research). The whole application is built on top of the C, meaning we will deal with full reverse engineering, IDA pseudocode, disassemblers and debugger shenanigans.
This blog provides an in-depth analysis of the exploitation process for an unauthenticated External XML Entity (XXE) vulnerability in Ivanti Endpoint Manager, identified as CVE-2024-37397.
In this post, we’ll delve into two vulnerabilities recently discovered in the HPE Insight Remote Support (IRS) application, versions prior to v7.14.0.629. These vulnerabilities—CVE-2024-53675 (unauthenticated XXE vulnerability) and CVE-2024-53676 (Remote Code Execution, or RCE vulnerability)—pose significant security risks, allowing unauthorized access and arbitrary code execution on vulnerable systems.
Collection of proof‑of‑concept exploits for various CVEs and vulnerabilities.
Pwning notes: tutorials, examples & challenge solutions for binary exploitation.
Deep dives and tools focused on Windows heap internals and exploitation techniques.