2 of 1; half a nybble of another

security, computing, engineering

poc

tools

2026.02.10Praxis - Semantic command & control framework for AI agents
2019.11.08AMD firmware flash dumping tool
2019.07.17divination - platform, iospace and physmem inspection framework

talks/articles/publications

2026.03.11Semantically Packaged Tradecraft: Credential Dumping
2026.01.25Semantic Protocol Confusion: When My LLM Thinks It's a Web Browser
2023.12.17BSOD colour change trick (Paged Out! #3)
2021.01.11Linux code injection paint-by-numbers
2019.12.27An Arbitrary Read Exploit for Ryzenfall (PoC||GTFO 20:05)
2019.08.14Understanding modern UEFI-based platform boot
2018.09.21Admiring the Zircon: Understanding Minimal Process Creation
2018.04.19Introducing Windows Defender System Guard runtime attestation
2017.06.07PLATINUM continues to evolve, find ways to maintain invisibility
2016.07.07Remote Code Execution in Xiaomi MIUI Analytics (meh)
2016.05.23Side-channel Attacks (Ben Gurion University)
2015.12.08What's in an Address: Understanding DDR Memory Mapping
2014.08.19Attacking the Linux PRNG on Android: Weaknesses in Seeding of Entropic Pools (WOOT '14)
2014.08.05Remote Exploitation of the Cordova Framework (OWASP IL '14)
2013.04.01Intro to Timing Attacks Workshop (OWASP Jerusalem APR'13)
2011.06.03Abusing the Linux Dynamic Loader with LD_PRELOAD (DC9723 JUN'11)

patents