Blogs

By year By category

2026

• 08 Jul Finding memory bugs in Apple's WebKit, mostly without me

2023

• 26 Dec 37C3 Potluck CTF 2023 - Santify

2021

• 23 Sep DNS Rebinding - Bypassing SSRF Protection

2020

• 10 Dec Unquoted Service Path Privilege Escalation in Razer Cortex - $750 USD
• 10 Jul Stealing HackerEarth Client Secrets via CORS Misconfiguration and Open Redirect XSS

2019

• 06 Aug GSoC'19 Final Report | OWASP Foundation
• 24 Mar Securinets-CTF-2019, Warmup
• 24 Mar Securinets-CTF-2019, Matrix of Hell
• 10 Jan AES-CBC bit flipping Attack

2018

• 23 Nov Simple Shellcode Injection
• 11 Oct Simple Attack On AES-ECB Mode