
publications
Offensive security research hub aggregating original vulnerability advisories, CVE proof-of-concept exploits, conference talks, and internal tooling…

Offensive security research hub aggregating original vulnerability advisories, CVE proof-of-concept exploits, conference talks, and internal tooling…

CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)

Analysis of CVE-2025-43529 (WebKit UAF) + CVE-2025-14174 (ANGLE OOB) exploit chain - iOS Safari

Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.

Curated collection of offensive security conference slide decks covering kernel and mobile exploitation, VM/container escapes, and…

Search for Unix binaries that can be exploited to bypass system security restrictions.

Exploits for CVE-2017-6008, a kernel pool buffer overflow leading to privilege escalation.

Beacon Object File for Cobalt Strike that executes .NET assemblies in beacon with evasion techniques.

LD_PRELOAD-based tool that hijacks gcc to inject malicious code into binaries during linking, enabling stealthy backdoor deployment without source…

A bin2bin code virtualizer for x86-64 PE's

Windows KASLR bypass using prefetch side-channel

MikroTik remote jailbreak for v6.x.x

A foundational C library for building operationally credible offensive capabilities

Windows NT ioctl bruteforcer and modular fuzzer

CVE-2018-4185: iOS 11.2-11.2.6 kernel pointer disclosure introduced by Apple's Meltdown mitigation.

ASLR bypass without infoleak


CVE-2019-0708 (BlueKeep)