• Root Pixel4a and Trust Burp Again Apr 15

• DotNetNuke Directory Traversal Vulnerability (CVE-2020-8593) Apr 8

• Strapi Framework Vulnerable to Remote Code Execution (CVE-2019-19609) Dec 3
• Hardcoded Credentials in Uniguest Kiosk Software lead to API Compromise Jul 17

• RCE with Arbitrary File Write and XSS in Reprise License Manager (CVE-2018–15573, CVE-2018–15574) Jul 18

• Malicious Document Analysis – Macro to Shellcode Nov 25
• Analyzing Obfuscated SWFs Oct 9
• IceCTF: Analyzing PCAPs and Reversing Encryption Aug 20
• A Look at Zepto Ransomware - Payload Delivery Analysis Aug 16
• Walking Through Angler Exploit Kit - Payload Delivery Analysis Apr 18
• A Trick to Bypass an XSS Filter and Execute JavaScript Feb 19
• An Encounter with Dridex - Malicious Document Analysis Feb 17
• Changing the DirectAccess and Web Application Proxy external certificate Feb 8
• Creating Your Own US Netflix Proxy with Google Cloud Feb 3
• Transfer Files To and From Sandboxed Guest on Hyper-V Feb 1
• Making gdb More Useful For Reversing Jan 29

• Batch file rename with PowerShell and Regular Expressions Apr 6