A chronological log of public work — newest first.

Certification

OSEE Certification

Earned OffSec’s OSEE (EXP-401) — Advanced Windows Exploitation.
CVE

CVE-2024-22059 — Overflow in .data leading to a LPE

Ivanti Security Advisory
Overflow in the .data segment reachable from an unauthenticated, local network connection leading to a Local Privilege Escalation.
Open
Paper

Analysis of the Windows Control Flow Guard

ARES '24
Paper analysing Microsoft’s Windows Control Flow Guard exploit mitigation, highlighting it’s implementation choices, the problems it solves, and its limitations.
Open
Certification

CRTO Certification

Earned ZeroPointSecurity’s CRTO (RTO-I).
Certification

OSED Certification

Earned OffSec’s OSED (EXP-301) — Windows Usermode exploit development.
Certification

OSCP Certification

Earned OffSec’s OSCP (PEN-200) — Penetration Testing.