Pwn2Own 2019
I managed to get the chance to participate in Pwn2Own 2019 this year, having joined F-Secure two months ago. In total we had 4 entries: TP-Link AC1750 Smart WiFi Router - LAN -
Maxpl0it
Autodesk FBX SDK <= 2019.2 Heap Overflow Exploitation
OverviewA heap overflow exists in the Autodesk FBX SDK (<= 2019.2) when an FBX file's header is parsed. This post shows how exploitation of this vulnerability can take place. Exploitation has been
Zero to Root in 60 seconds
Upon cleaning out some boxes of old wires and techjunk I’d completely forgotten about for years, I came across an old netbook my dad had owned. Netbooks were all the rage back
Modern Man-in-the-Middle Attacks
Contents: IntroductionBypassing Basic HTTPSBypassing 301 CachingBypass non-preloaded HSTS through NTPBypassing Preloaded HSTS through logic errorsCookie DomainsExploiting with MiTM on DNSExploiting without MiTM on DNSIntroductionThe old ways are dead. Gone are the days where
Identifying a rival company stealing from you
I’ve spent a lot of my time doing security bits ‘n bobs for a large takeaway EPOS company. Usually this entails a full review all every repository to patch SQL injection vulnerabilities,