Flatt Security Research

Posts

Non-Intrusive Web Recon: Techniques from Chrome DevTools Recorder
Dec 25, 24
Non-Intrusive Web Recon: Techniques from Chrome DevTools Recorder
Compromising OpenWrt Supply Chain via Truncated SHA-256 Collision and Command Injection
Dec 6, 24
Compromising OpenWrt Supply Chain via Truncated SHA-256 Collision and Command Injection
Beyond the Limit: Expanding single-packet race condition with a first sequence sync for breaking the 65,535 byte limit
Aug 2, 24
Beyond the Limit: Expanding single-packet race condition with a first sequence sync for breaking the 65,535 byte limit
BatBadBut: You can't securely execute commands on Windows
Apr 9, 24
BatBadBut: You can't securely execute commands on Windows
Bypassing DOMPurify with good old XML
Apr 1, 24
Bypassing DOMPurify with good old XML
How I could bypass DOMPurify with XML
Finding bugs to trigger Unauthenticated Command Injection in a NETGEAR router (PSV-2022–0044)
Mar 26, 22
Finding bugs to trigger Unauthenticated Command Injection in a NETGEAR router (PSV-2022–0044)