Security Research & Exploit Development

Homoglyph Attacks: Confusing Characters to Obfuscate Logic

Creating an Invisible Unicode Hangul Filler Backdoor in web applications

Exploiting delegatecall vulnerabilities in smart contracts

Zero-Knowledge Proofs: Prove Your Bank Balance Without Revealing It

Writing Custom Shellcode in Assembly for Windows x86 (Finding Kernel32.dll)

Guest Podcast Thuis In IT (Dutch)

Bypassing ASLR and DEP using WriteProcessMemory

ASLR and DEP bypass using VirtualAlloc

Android SSL Pinning Bypass

Manipulating the Blockchain for Fun and (NOT) for Profit

Stack Pivoting to leaking libc in limited stack space

Creating a backdoor through APT sources

Leaking libc through puts@got with ROPchains

Stealing Browser History: Exploiting CSS Timing Side-Channels with requestAnimationFrame

Your Browser Leaks More Than You Think

Leverage XSS Impact with Capturing Photos and Videos

Prepared Statement Bypass in NodeJS MySQL

Race against the machine: exploiting race conditions in coupons

Stealing Secrets from internal Web Pages from XSS through command injection

MongoDB Injection (NoSQL) with Mongoose

ImageMath PIL PoC - CVE-2022-22817 | Amidst Us (HTB)

SQLi to Python Pickle Deserialization RCE | C.O.P (HTB)

Markdown XSS to Cache Poisoning through Directory Traversal

Bypassing CSP through jsDelivr

Escaping iframes dynamically

Prototype Pollution in PugJS

Hiding Malware in SVG's: A new Threat to NFTs (DUTCH)

File Inclusion Cheat Sheet

Circumventing DEP on x86 Windows

Deploying ERC-20 Tokens on Starknet with Caïro

Chainhunters - Criminal Blockchain Investigation

Crypto Crime Training

Development of custom blockchain tokens and smart contracts at cryptomaker.nl

Ethical hacking specialist at tozetta.com

Hacking Smart Contracts and Exploiting Vulnerabilities on the Blockchain