Introduction I’ve been playing around with vibe reversing using Claude and an IDA MCP Server and decided to look into exploring kernel drivers for BYOVD attacks. I found an anti-cheat driver signed...

Review of Mobile App Pentest Certifications State of Mobile App Certs and My Journey The landscape of mobile app penetration testing certifications has been evolving rapidly. However, as a beginn...

Public Security Research: XML External Entities Vulnerability Discovery Recently, I did some public security research and discovered a critical security vulnerability in a login portal. The login ...

TLDR Checkout https://github.com/momo1239/CVE-2024-35333 for proof of concept inputs. CVE-2024-35333 A stack buffer overflow vulnerability exists in the charset handling functionality of html2xht...

SANS Offensive Operations CTF This was a challenge in the pwn category of the SANS Offensive Operations 2024 CTF. This is a writeup for the challenge “Warmup Pwn”. Unfortunately, I did not take any...

Reverse Engineering L3 Writeup This is part of a course called Fundamentals of Software Exploitation designed to teach students about exploitation development and vulnerability research. There are ...

CVE-2023-24203-and-CVE-2023-24204 Introduction Recently I’ve been trying to hunt web vulnerabilities in OSS and discovered two vulnerabilities in the SourceCodester Simple Customer Relationship M...

What is DLL Injection? DLL Injection is a common evasion technique used by many malware samples. We can execute shellcode in memory of our current process, and inject shellcode into remote processe...

Introduction After taking both the CRTO and eCPTXv2 course, I wanted to reorganize my notes and discuss all the different ways to abuse an active directory trust. This is not a comprehensive list o...

Introduction I’m going to be discussing executing shellcode in Python. A shellcode runner is a tool that executes shellcode in memory. This technique enables us to avoid downloading malware to the ...