During my security research, I discovered several critical vulnerabilities in OAuth implementations. My findings include:

• Token validation bypass technique
• Missing state parameter exploitation
• Redirect_uri validation flaws
• Cross-site request forgery vectors

All vulnerabilities were reported through proper channels and have since been patched. The vendors awarded $13,500 in total bounties.

After struggling with existing memory analysis tools, I built MemLeakHunter to combine several techniques in one workflow:

• Static binary analysis via custom LLVM pass
• Dynamic instrumentation using modified Valgrind core
• Pattern matching for known vulnerable constructs
• Integrated exploit generation for confirmed vulnerabilities

The tool is available on my GitHub with comprehensive documentation. Recent findings include two CVEs in popular open-source libraries.

The Apocalypse CTF featured some particularly interesting challenges. This writeup details my solutions for:

• Kernel exploitation challenge (Pwn)
• Custom encryption schema reverse engineering (Crypto)
• Supply chain attack analysis (Forensics)
• Zero-day vulnerability emulation (Web)

I've included all my scripts, approaches, and lessons learned. Several techniques were novel enough that I've been asked to present them at an upcoming security conference.

This multi-month research project involved acquiring and analyzing 5 popular smart locks. My findings include:

• UART/JTAG debugging ports left accessible
• Hardcoded administrator credentials
• Unencrypted wireless protocol implementations
• Remote lock override vulnerabilities

I've documented the entire reverse engineering process, from hardware teardown to firmware extraction and analysis. All vendors were notified and most issues have been addressed in firmware updates.