| 2024-03-31 |
xz/liblzma: Bash-stage Obfuscation Explained |
puzzlingcaptcha |
|
| 2023-08-07 |
My howto script |
|
|
| 2023-07-26 |
Talk: PCI Express to Hell |
|
|
| 2023-07-03 |
Live: On Leaving Google and What's Next |
|
|
| 2023-05-09 |
Thoughts on overlarge fields in formats and protocols |
|
|
| 2023-04-12 |
On self-healing code and the obvious issue |
|
|
| 2023-03-20 |
LLM + Clean Room: Will LLMs be the death of code copyrights? |
|
|
| 2023-02-05 |
Solving a VM-based CTF challenge without solving it properly |
|
|
| 2023-01-29 |
Asking MEMORY.DMP and Volatility to make up |
|
|
| 2023-01-22 |
KnightCTF 2023 write-ups (RE category) |
|
|
| 2023-01-04 |
Dev Log: Moving contacts from Android to MaxCom MM721 |
|
|
| 2022-11-24 |
Weird PCI-e connector actually works |
|
|
| 2022-11-13 |
A clever Python challenge – find flag |
|
|
| 2022-11-11 |
Debug Log: The mystery of usb 3-11 device |
|
|
| 2022-10-12 |
Hello World Under the Microscope |
dist1ll |
|
| 2022-09-23 |
Crow HTTP framework use-after-free |
|
|
| 2022-09-23 |
Crowbleed (Crow HTTP framework vulnerability) |
|
|
| 2022-07-30 |
Treebox - Python AST sandbox challenge from Google CTF 2022 |
|
|
| 2022-07-24 |
An informal review of CTF abuse |
tybulewicz |
|
| 2022-07-10 |
Debug Log: Why is my M.2 SSD so slow? |
|
|
| 2022-06-13 |
Screams of Power vulnerabilities (Powertek-based PDUs) |
|
|
| 2021-11-17 |
Google's Beginner Quest 2021 - all tasks solved recording |
|
|
| 2021-11-17 |
Seventh Inferno vulnerability (some NETGEAR smart switches) |
|
|
| 2021-11-17 |
Draconian Fear vulnerability (some NETGEAR smart switches) |
|
|
| 2021-11-17 |
Demon's Cries vulnerability (some NETGEAR smart switches) |
|
|
| 2021-11-17 |
Making numbers out of thin air, Python bytecode edition |
|
|
| 2021-11-17 |
ClickMeeting minor privacy weakness (fixed) |
|
|
| 2021-11-17 |
Gears of Chaos vulnerability chain (NETGEAR WAC104 access point) |
|
|
| 2021-11-17 |
WAC104 vulnerabilities - please go patch (details on Monday) |
|
|
| 2021-11-17 |
FAQ: Difference between vulnerability, exploit and CVE |
|
|
| 2021-11-17 |
popen+cat explained |
KORraN |
|
| 2021-10-02 |
Google's Beginner Quest 2021 - all tasks solved recording |
|
|
| 2021-09-13 |
Seventh Inferno vulnerability (some NETGEAR smart switches) |
|
|
| 2021-09-06 |
Draconian Fear vulnerability (some NETGEAR smart switches) |
|
|
| 2021-09-06 |
Demon's Cries vulnerability (some NETGEAR smart switches) |
|
|
| 2021-07-18 |
Making numbers out of thin air, Python bytecode edition |
|
|
| 2021-07-08 |
ClickMeeting minor privacy weakness (fixed) |
|
|
| 2021-07-03 |
popen+cat explained |
|
|
| 2021-06-29 |
Gears of Chaos vulnerability chain (NETGEAR WAC104 access point) |
|
|
| 2021-06-23 |
WAC104 vulnerabilities - please go patch (details on Monday) |
|
|
| 2021-05-23 |
FAQ: Difference between vulnerability, exploit and CVE |
|
|
| 2021-05-10 |
Feral Terror vulnerability (some NETGEAR smart switches) [UPDATED 3] |
|
|
| 2020-08-11 |
Just another Null Byte Poison via Unicode variant (MuPDF mutool RCE) |
|
|
| 2020-07-28 |
PWNing Online 2020 CFP |
|
|
| 2020-04-04 |
How to document your knowledge (in a CV/resume) |
|
|
| 2020-03-26 |
confidence 2020 CFP deadline is approaching fast |
|
|
| 2020-03-26 |
What's the probability of a downloaded ZIP being broken? |
|
|
| 2020-03-26 |
GSGC2019: Winners |
|
|
| 2020-03-26 |
Teaser Dragon CTF 2019 - this Sat/Sun |
|
|
| 2020-03-26 |
Gynvael's Summer GameDev Challenge 2019 |
|
|
| 2020-03-26 |
HackYeah 2019: 30 free tickets |
|
|
| 2020-03-26 |
Paged Out! Issue #1 |
|
|
| 2020-03-26 |
Paged Out! Article submission deadline is 30th July 2019 |
|
|
| 2020-03-26 |
Security conferences and CFPs |
|
|
| 2020-03-26 |
Introducing Paged Out! magazine (also CFP) |
|
|
