
twitter-advanced-search
Comprehensive reference guide to Twitter advanced search operators for precise social media data gathering, including filters for content, users,…

Comprehensive reference guide to Twitter advanced search operators for precise social media data gathering, including filters for content, users,…

Incident Response Methodologies 2022

The Web Application Hacker's Handbook - Extra Content

Curated YARA rules and detection programs for identifying ransomware families, providing signature-based indicators for malware triage, threat…

Trail of Bits Testing Handbook - appsec.guide

Take first steps in CodeQL for Python by writing a query to find CVE-2024-32022

Log4Shell / Log4J Payload - CVE-2021-45046 and CVE-2022-42889

Defensive research repository for CVE-2026-31431, a Linux kernel local privilege escalation via page cache corruption through AF_ALG, splice(), and…

Educational presentation analyzing CVE-2021-21193, a use-after-free vulnerability in Google Chrome's Blink engine, including exploitation details and…

Programmatically create hunting rules for deserialization exploitation with multiple keywords, gadget chains, object types, encodings, and rule types


Twitter vulnerable snippets

A collection of my Semgrep rules to facilitate vulnerability research.

Reverse engineering NVIDIA SASS instruction dictionary, kernel audits and pattern recognition across GPU architectures.

Technical dossier on the DPRK-linked PolinRider supply-chain attack, documenting obfuscated JS payload injection, git history manipulation, C2…

A pure Rust reimplementation of libxml2

Semantic inspector for SQL — catches fan-out double-counting, additivity violations, wrong join keys, and policy breaches before the query runs.…