initblog.com

In October 2025, I discovered CVE-2025-12744, a local privilege escalation affecting Fedora Linux.

A vulnerability in the Ollama desktop GUI’s cross-origin controls allowed malicious websites to reconfigure local application settings, redirecting all private AI conversations to attacker-controlled servers.

Nuclei, the open-source vulnerability scanner, now supports enumerating public cloud resources across AWS, Azure, and GCP using new self-contained templates.

Ride the Lightning is a popular add on for Bitcoin full-node distributions like Umbrel.

The SSDP engine in Firefox for Android (68.11.0 and below) can be tricked into triggering Android intent URIs with zero user interaction.

Google Cloud Platform provides OS Login for managing SSH access to compute instance using IAM roles.

Unauthenticated attackers on a local network can force stock Windows systems to perform arbitrary HTTP GET requests, including to the target’s localhost interface.

Linux systems running LXD are vulnerable to privilege escalation via multiple attack paths, two of which are published in my lxd_root GitHub repository.

In January 2019, I discovered a privilege escalation vulnerability in default installations of Ubuntu Linux.

I found an interesting way to achieve remote code execution on a recent test.

I noticed a nice, cheap, low-tech alternative to badge cloning on a recent physical security engagement and thought I’d share.

When performing social engineering engagements, it’s tricky to find a payload that demonstrates the gravity of the attack without going full-on red team and shelling boxes.

Working on hacking a mobile app that uses NTLM to authenticate to a back-end web service?

Doing a black-box test of a mobile app that uses NTLM authentication to speak to the web service?

The XML parsing engine for Plex Media Server’s SSDP/UPNP functionality was vulnerable to an XML External Entity Processing (XXE) attack.

This is part two in a series of blogs on cryptocurrencies and security.

This is part one in a series of blogs on cryptocurrencies and security.

In this post, we will walk through detailed steps to intercept, review, modify, and replay flash-based web apps.

A real-life example of bypassing UI restrictions in a web application.

Beginners guide to intercepting HTTP traffic on Android.

Generate targeted password wordlists based on song lyrics for specific artists.