Stories by pentestercrab

iOS 1-day hunting: uncovering and exploiting CVE-2020-27950 kernel memory leak

Simple bugs with complex exploits – an analysis of a V8 vulnerability from P0

Ghostscript Safer Sandbox Breakout (CVE-2020-15900)

Lua SUID Shells – How to make SUID Lua scripts not drop privileges

Hacking with environment variables

Windows Telemetry service elevation of privilege

Hacking with Environment Variables

Presentations of Diffie-Helman leave out how to find g

Vulnerabilities allowing offering malicious firmware updates to Linux systems

Fwupd – S3 bucket takeover and CVE-2020-10759 signature verification bypass

Cmd Hijack – a command/argument confusion with path traversal in cmd.exe

Fwupd – S3 bucket takeover and CVE-2020-10759 signature verification bypass

Hobo Nickel

Surprising Certificate Authority validation gotcha

TLS-Attacker – a Java-based framework for analyzing TLS libraries

The UK government's Covid-19 simulation model has many programming bad practices

Heap Exploitation in Chrome's PartitionAlloc – Part 1 by Dr Silvio Cesare

Doomsday planning for less crazy folk (2018)

Forgot2kEyXCHANGE CVE-2020-0688: Remote Code Execution Microsoft Exchange Server

OpenSSH with FIDO2 and Trezor

1
2
3
4
5
6
7
8
9
10