Don't trust client-side: How I hacked an mini-game event in PUBG Mobile
Exploiting client-side trust to manipulate a PUBG Mobile mini-game event leaderboard.
My journey on how I build a kernel-level iOS cheat
My jorney on how I build a PUBG Mobile iOS client-server undetected ESP using kfd kernel exploit.
Fuzzing GoldSrc: Weaponizing Network Packets for RCE in Counter-Strike 1.6
How I used the WTF fuzzing framework to find bugs in the GoldSrc engine and exploit a stack buffer overflow for RCE in Counter-Strike 1.6.
Performance over security: Speculative execution vulnerabilities (Spectre & Meltdown)
A deep dive into Spectre and Meltdown, two hardware-level vulnerabilities that traded security for performance.
Elysium - UEFI Bootkit Framework that attacks boot-time Code Integrity
Deep dive into attacking the winload Code Integrity and revealing new techniques