Jackson T.

Contents Disclaimer Introduction Problem Space Solution Space Concluding Remarks Disclaimer This article contains subject matter that requires careful discussion.

As a cybersecurity practitioner in the private sector, this question has been nagging me in recent years.

Last year, I watched a thought-provoking talk from David Krakauer (president of the Santa Fe Institute), and from it I learned a mental model about tools or what he called “cognitive artifacts”.

Autocratization (a.k.a. democratic backsliding) is happening around the world.

The technology tree from Civilization (turn-based strategy video game series).

This hasn’t been ported over to the new blog.

This hasn’t been ported over to the new blog.

Below is some code I wrote that was helpful for recovering proto definition files from encoded descriptor blobs that were embedded in binaries.

Introduction This article introduces a more subtle way to hide data within Windows Registry keys.

Summary: This post goes over how attackers could use search engines to find and abuse legitimate code-signing certificates.

About This short post goes over the workflow I use for the PMKID attack using an Alfa AC1200 (AWUS036ACH) card with a bootable Kali USB and bettercap + hcxdumptool.

CVE details for a COM-based local privilege elevation with a brief write-up on the process from discovery to root.

This post discusses a CVE for driver-based LPE with an in-depth tutorial on the process from discovery to root.

Here are five talks I enjoyed in understanding the state-of-the-art in memory corruption strategies and exploit mitigations.

Hey folks, happy new year.

The goal here is to find valid IOCTL codes for the HackSys Extreme Vulnerable Driver (HEVD) by analyzing only the binary.

Usage This script leverages the Project Zero exploit for a heap overflow vulnerability in the JScript library (CVE-2017-11907) to generate a payload for use with Responder.

This post is about the approaches I’ve learned for finding vulnerabilities in applications (i.e. software security bugs, not misconfigurations or patch management issues).

© 2010 Italy Travel Experience (CC BY-NC-SA 2.0) tl;dr: I found bugs in Oracle's hotel management platform which can be used to escalate app privileges and gain access into the operating system and database.

Occasionally there are times when command execution payloads via Runtime.getRuntime().exec() fail.

In my line of work, I enjoy finding and exploiting subtle defects in systems that could be used to compromise the assets those systems are entrusted to protect.

Decoding and Decompiling the APK apktool d crack-me-if-you-can.apk d2j-dex2jar -o crack-me-if-you-can.jar crack-me-if-you-can.apk java -jar procyon-decompiler.jar -jar crack-me-if-you-can.jar -o src Finding the Flag Two common starting points are the Andr…