July 19, 2026 Headless Browser RCE, Part 2: Chaining Three JavaScriptCore Bugs Chaining three old JavaScriptCore bugs into a single-file RCE against Splash's QtWebKit engine, under W^X and ASLR.

February 9, 2026 Building a Headless Browser RCE with Claude Opus 4.6 Using Claude Opus 4.6 to build a working RCE exploit for a heap buffer overflow in PhantomJS, from existing CVE to PoC.

February 1, 2026 Hunting for Deserialization Gadgets in the Rails Ecosystem Walking through the process of identifying a deserialization gadget chain commonly available in Ruby on Rails applications.

January 27, 2026 Unsafe Reflection Vulnerabilities How unsafe reflection turns user input into arbitrary class instantiation, from the mechanics of CWE-470 to exploitation and prevention across Java and Ruby.

February 18, 2022 Java Deserialization Vulnerabilities Understanding Java deserialization from serialization internals to exploitation, with a walkthrough of using ysoserial gadget chains to achieve RCE on Apache OpenMeetings.

December 2, 2021 SSTI In Python Frameworks Exploiting Server-Side Template Injection in Jinja2 and Django, from MRO traversal to remote code execution, with detection and prevention strategies.