Mr Robot·Oct 31CVE-2026–98432: How a Linux Kernel Race Condition Can Lead to Remote Root AccessCVE-2026–98432: How…Technical analysis of a zero-click TCP use-after-free vulnerability, kernel memory corruption, exploitation mechanics, and mitigation…
Cipher Phreak·Oct 25PHP2Shell: Critical on Paper, Hard in PracticeIt is not as bad as Log4shell or HeartBleed….
rahul.0xkr·Oct 18Windows Process Injection: From Classic DLL Injection to Abusing SetWinEventHookMost people learn process injection by reading a single technique, copying the code, and moving on. That’s how you get code that works…
Adinda mirza devani·Oct 6Ternyata “Nemu Celah” Itu Baru Level 1?Ngl, selama ini tiap ada berita soal celah keamanan baru, aku cuman bereaksi “ohh gitu” terus lanjut scroll lagi. Literally nggak pernah…
Mohamed fahmy·Oct 4I Found the Smallest HEIC That Crashes libheifA few weeks ago Hacktron dropped HEIF Heist, a whole family of attacks against image decoders. Buried in there was CVE-2026–84383 — a heap…
Will Giles | Cybersecurity·Oct 2From CVE to PoC: How I Used Claude Code to Create a Custom N-Day ExploitHow an agentic AI tool turned a public Langflow CVE into a working proof of concept, and why that should worry defenders
Mr_Karkr·Sep 28Cookie NILE CTFHi, In this article, I will explain how I solved the “Cookie” PWN challenge in the Nile CTF competition. Let’s get started.A response icon1A response icon1
rahul.0xkr·Sep 24Windows Kernel Object Lifetime (UAF): Who was supposed to keep this object alive?A pointer can still exist even after the object behind it is gone.
Raafat Abualazm·Sep 21Zero-click APV, in a player that auto-plays shared clipsCVE-2026–28618 in StreamBox — the same OpenAPV decoder class as CVE-2026–0006, turned into a heap write against a session object.
rahul.0xkr·Sep 20Swimming in the Modern Windows Kernel Pool: From ExAllocatePool2() to UAFs, grooming, and the…When I first started learning Windows kernel exploitation, I had a fairly simple mental model of the kernel pool.
