LargeBin Attack is the future for heap exploitation.

RCE for CACTI monitor system, Auth bypass for Duplicati backup solution.

Skipper Proxy SSRF, Blazor traffic exploit, Privesc from process monitor

CVE-2023-41425 for WonderCMS RCE with malicious themes module.

Active Directory in Linux? Abuse SSH CA signing

There is no excerpt because this is a protected post.

CVE-2024-32002 for Git RCE, CVE-2024-20656 for Visual Studio PE

A classic example for Hash Length Extension Attack.

Pluck CMS RCE, and fun Depix to reveal pixelized passwords.

Cross Forest Attack in Windows Active Directory with Bi-directional Trust