Posts on vulnerability-research
6 posts on vulnerability-research. Notes from public sources and my own test lab.
Jumping to Address 0x41414141: What Do You Do When the Patch Isn't Out Yet?
Seeing 0x41414141 in the EIP register means you're already past the 'get well soon' phase. Let's dive into the anatomy of zero-days and how to survive the gap before a patch is released.
Not a Time Bomb, but a Ghostly Shadow: The Reality of Zero-Days and the Night We Wait for the Patch
A deep dive into the reality of Zero-Day vulnerabilities from a Red Teamer's perspective—why waiting for a patch is no longer a luxury and how we handle those hidden tunnels in our systems.
When the Clock Stops: A Zero-Day Survival Guide
What happens when you face a vulnerability that doesn't even have a name yet? I'm sharing the story of a 3:00 AM wake-up call and how we handle 'ghost' threats from a Red Team perspective.
Chasing the Unknown: Zero-Day Chaos and the Vulnerabilities That Won't Wait for a Patch
A deep dive into the world of Zero-Day exploits from a Red Teamer's perspective. Learn the anatomy of an attack that bypasses traditional defenses and how we deal with invisible threats.
Zero-Day: The Art of Living with an Unpatchable Nightmare
Facing a vulnerability with no signature, no patch, and no known pattern is a wake-up call for any security pro. Here is a look into the reality of zero-days from the perspective of the Red Team kitchen.
Görünmeyeni Avlamak: Zero-Day Efsanesi ve Otomatize Taramaların Sefaleti
Otomatik tarama araçlarının sahte güvenine kapılanlara kötü bir haberim var: Zero-day'ler o raporlarda gözükmez. Bu yazıda, bilinmeyenin peşine düşüyoruz.