Blog
Security research, bug hunting, malware analysis, and tools I've built.
-
Your Steam Games Suck: 4 RCEs and Counting
Four Steam game code-execution paths through courses, maps and mods.
-
Crosshair X URI to Code Execution via SVG Injection
Crosshair X 15.5.3 code execution through a crafted URI or a shared Steam Workshop crosshair.
-
Dude, Where's My DLL?
DLL hijacking I've seen in incidents, what I've added to HijackLibs, and what I found inside FudCrypt.
-
The Chrome Extension Economy, and How Trust Gets Hijacked
I bought 16 Chrome extensions to see what changes hands in an ownership transfer: the code, the users, and the ability to send them updates.
-
Shipping ClipShield, a Browser Extension That Blocks ClickFix and Clipboard Attacks
How I built ClipShield to catch ClickFix-style clipboard attacks, and why it runs locally without telemetry.
-
Inside a Low-Budget Spyware Operation
I found an exposed mobile spyware panel, traced its infrastructure, and followed the mistakes that left victim data visible.
-
How I found an infinite money bug in a rewards platform
I found a way to spend reward points, reclaim them through a comment edit, and bypass the vendor's first fix.
-
How we got code execution on a government satellite system
We followed a public lead to a NOAA web application, found command injection, and reported it to the agency.