Submissions by pentestercrab

FormatFuzzer: A framework for efficient and quality generation of binary inputs

Ruby Universal RCE Deserialization Gadget Chain (2018)

Fail2ban – Remote Code Execution

Petrov Day 2021: Mutually Assured Destruction?

Home Assistant Amber

GitHub Actions checkspelling community workflow GitHub_TOKEN leakage via symlink

Domino's iOS App Settings

A hackers perspective on bug bounty triage

DOM Invader: DOM XSS just got a whole lot easier to find

ZeroTier – Global Area Networking

Piecing Together the Dark Legacy of East Germany's Police (2008)

PrintNightmare (CVE-2021-1675): Remote code execution in Windows Spooler Service

BlockFi issued BTC instead of USD, a 45,000x mistake

I Hacked Google App Engine: Anatomy of a Java Bytecode Exploit

The ‘artisanal genius’ of creating iPhone-breaking hacks

Fuzzing Sockets: Apache HTTP, Part 2: Custom Interceptors

Sd: My Script Directory

You might want to update your F5 Big IP appliances

A Journey Combining Web Hacking and Binary Exploitation in Real World

Sudoedit Heap Overflow

Stop Using Libgcrypt 1.9.0

Rysolv – Fix open source issues, get paid

The search for the “perfect” Advent Calendar (2018)

Tuya IoT and EZ Mode Pairing

Cross-site leaks (XS-Leaks) Wiki

iOS 1-day hunting: uncovering and exploiting CVE-2020-27950 kernel memory leak

Simple bugs with complex exploits – an analysis of a V8 vulnerability from P0