Writing
33 posts on vulnerability research, exploit development, reverse-engineering, and CTF challenges — newest first.
2026
2024
- Ashley Madison Post-Mortem Ashley Madison
2022
- Android HID device forwarding VR/XR/MR
- Low-latency VR desktop with Immersed VR/XR/MR
2015
2014
- Ghost in The Shellcode 2015 Teaser: Citadel solution CTF
- Ghost in The Shellcode 2015 Teaser: Don't Panic! Shift Keying! Solution CTF
- Mentorship Exploit Development
- CVE-2014-6271 / Shellshock & How to handle all the shells! ;) Exploit Development
- CVE-2014-3153 Exploit Exploit Development
2013
- Available for projects Work
- Oldies but goldies #2: Windows GDI Kernel Exploit Exploit Development
- Oldies but goldies: Exploits for CVS and Courier IMAP Exploit Development
- ARM payload development Research
- Team ClevCode
2012
2011
- CanYouCrackIt.co.uk / GCHQ Challenge Solution – Stage 3 GCHQ
- CanYouCrackIt.co.uk / GCHQ Challenge Solution – Stage 2 GCHQ
- CanYouCrackIt.co.uk / GCHQ Challenge Solution - Stage 1 GCHQ
- PlaidCTF 2011 - 25 - PC Rouge - 600 pts CTF
- PlaidCTF 2011 - 36 - I'm HUNGRY!..as hell - 250 pts CTF
- PlaidCTF 2011 - 26 - Hashcalc2 - 150 pts CTF
- PlaidCTF 2011 - 23 - Exploit me - 200 pts CTF
- PlaidCTF 2011 - 22 - Hashcalc1 - 300 pts CTF
- PlaidCTF 2011 - 21 - Key leak - 450 pts CTF
- PlaidCTF 2011 - 20 - C++ upgrade - 300 pts CTF
- PlaidCTF 2011 - 19 - Another small bug - 250 pts CTF
- PlaidCTF 2011 – 18 - A small bug - 250 pts CTF
- PlaidCTF 2011 - 08 - The App Store! - 250 pts Plaid CTF
- PlaidCTF 2011 - 06 - Fun with Numb3rs - 100 pts Plaid CTF
- PlaidCTF 2011 - 04 - Here, There Be Dragons - 300 pts Plaid CTF