Posts

AMA: Novee researcher who finds pre-auth RCE in enterprise Java, no login required. Black Hat & DEF CON 2026 speaker.

Bonzibuddy

I went looking for a managed-Postgres provider. Instead, I found a vulnerability in a 4-star PostgreSQL extension available everywhere! and turned it into code execution at NeonDB, Supabase, Xata and many other PostgreSQL service companies

Experimental (LLM generated) IoT exploitation framework

Ask me any hard problem

My Honest Review of "Real-World Bug Hunting" by Peter Yaworski – The Book That Made Things Click for Me

Can a laptop previously owned by company call back?

Accessing a locked Android phone and a laptop

Defeating LLM Watermarks & Detection Heuristics

Not a first time Chess.com has an alleged leak, this one seems to be like the ones before but on a larger scale

Thoughts on the official Marauder v8?

Anyone know any good cheap tools i can buy on ali express to get a hacking kit?