Wpisy na Blogu

Full pipeline walkthrough: firmware extraction, Ghidra reverse engineering, QEMU emulation, and GDB fork-following to confirm a pre-auth stack buffer overflow in a MIPS router CGI binary. Including the debugging and troubleshooting steps most writeups skip.

Kompletny przewodnik po TLPT pod DORA - kto jest objęty obowiązkiem, jak przebiega każda z sześciu faz, czego wymaga regulacja od red teamów i dostawców threat intelligence, i na co zwrócić uwagę przy wyborze partnera.

Three kiosk breakout techniques chained during an AFINE engagement - from cracking a KioWare PIN to NT AUTHORITY\SYSTEM. Covers CVE-2024-3459, CVE-2024-3460, and a bypass of CVE-2022-44875 across file dialog escapes, Adobe Acrobat sandbox escape, and iframe privilege escalation.

GlassWorm has compromised 400+ packages across five waves - and you can't see the malicious code. It hides inside invisible Unicode characters that your editor, terminal, and linter all render as nothing. We built glassworm-hunter to fix that: a free, open-source Python scanner that detects GlassWorm payloads in your VS Code extensions, npm packages, and Python dependencies before they become your problem.

A $3 microcontroller. No lockout. 10,000 PIN combinations. Here's how CVE-2024-3461 turns any KioWare kiosk into an open door - and why USB HID attacks bypass every USB security policy you have.

How an unvalidated XML field in Rapid7 AppSpider escalates to arbitrary code execution via ActiveX. CVE-2025-4951, found during a manual audit.

Pickle deserialization in ML pipelines is a silent RCE vector hiding in plain sight - passing code review, surviving security audits, and shipping to production at companies that know better. Here's why it keeps happening.

Dyrektywa NIS2 nie wymaga tylko dokumentacji - wymaga dowodu, że kontrole bezpieczeństwa wytrzymują rzeczywisty atak. Techniczne i operacyjne omówienie dla menedżerów bezpieczeństwa.

What to look for in a web application penetration testing provider - and how to tell if you're getting a real test or a cleaned-up scanner report.

Czy Caido to poważna alternatywa dla Burp Suite Professional? Porównanie funkcjonalności obu narzędzi.