Offensive security research — kernel, EDR, web, AD.

HOME
CATEGORIES
TAGS
ARCHIVES
ABOUT

Home Tags pre-auth

Tag

pre-auth 1

One byte of URL-encoding past a WAF: notes on CVE-2026-40050 and the GraphQL endpoint nobody fenced Jun 2, 2026

Recently Updated

OpenConnect Fortinet: server-induced chosen-offset stack write via snprintf-return-value cursor arithmetic
Case-variant path aliases in Rust denial gates: anatomy of a canonicalize-fallback bypass
Android IncFS verity-signature race — and what Google ASR "Won't Fix (Infeasible)" actually means
An Android Bluetooth ISO out-of-bounds write that lands RIP on `commit_creds`, marked Infeasible by Google ASR
Two Lenovo Power Manager kernel drivers, one Everyone:RW DACL — a class-pattern in TPPWR64V and ibmpmdrv

Trending Tags

byovd methodology cortex-xdr kasan kernel android etw fortify-source hvci indirect-syscalls

© 2026 SixSixSix. Some rights reserved.

Using the Chirpy theme for Jekyll.

Trending Tags

byovd methodology cortex-xdr kasan kernel android etw fortify-source hvci indirect-syscalls

New content available