Stripping KiezelPay (and other network calls) from Pebble Watch Faces
in Blog
How to modify Pebble watch faces to your heart’s content
Discovering Null Byte Injection Vulnerability in GoAhead
in Blog
How I found a zero-day in an embedded web server while testing problems for PlaidCTF 2021.
Bypassing Cinemark's Gap Restriction
in Blog
Cinemark doesn’t want people to leave gap seats when reserving tickets, but not badly enough to implement a server-side check…