Security Research · Vulnerability Analysis · Exploit Development
Independent security research focused on understanding how systems fail — and how those weaknesses can be identified, demonstrated and mitigated.
An authenticated remote code execution vulnerability in the FreePBX Backup & Restore module caused by unsafe deserialization of attacker-controlled manifest data during backup restoration.
Authenticated OS command injection in Centreon poller configuration, resulting in arbitrary command execution when the poller configuration is reloaded.
Read research →Technical validation of an unauthenticated remote code execution path affecting multiple GL.iNet network devices, with Metasploit exploitation.
Read research →Analysis and exploitation of the Apache Spark ACL code path that allowed attacker-controlled input to reach a Unix shell command.
Read research →Original vulnerability discovery, technical analysis, responsible disclosure and security advisories.
Proof-of-concepts, Metasploit modules and practical exploitation research.
Research into authentication, authorization, injection flaws, deserialization and server-side vulnerabilities.
Linux, Windows, network appliances, embedded systems and hardware-oriented security research.
Understand the vulnerability.Demonstrate the impact.Improve the security.
Research is conducted for defensive security, technical understanding and responsible vulnerability disclosure.