Intro Most Firebase writeups focus on the auth layer, open signup, email verification bypass, enumeration, stealing tokens from IndexedDB. On this engagement the interesting bug wasn’t in the auth...
What Happens When You Exploit SeImpersonatePrivilege?
Introduction A while back, someone asked me a question that actually made sense. He wanted to know HOW the SeImpersonatePrivilege exploitation really works. Like, why does having this privilege le...
Understanding Portable Executable (PE) File Structure
Introduction If you’ve ever wondered what makes your Windows programs tick, you’re in the right place. In this article, we’ll delve into the world of Portable Executable (PE) files, the backbone o...