Blog Posts
cs
jailbreaking the switch 2
October 21, 2026
cs
ns2jb is a software-only jailbreak of the switch 2 for the current latest firmware 23.0.1
stack unwinding can lead to leakless code execution
September 14, 2026
cs
making glibc dlopen libgcc to run our DWARF bytecode using only null byte writes
load balancing usage across multiple codex accounts
May 2, 2026
cs
getting blocked by usage limits? these new scheduling algorithms for codex-lb (and some neat tricks) can help
a list of software (and youtube channels) i recommend
April 19, 2025
cs
ads for things that do not pay me to make ads for them. you should try some of these
setcontext32: easily convert arbitrary write to rce
November 22, 2023
cs
a reusable method for write promotion via overwriting the plt trampoline in libc’s got
daydream: turning stack OOB into universal RCE without ever leaking memory
August 5, 2023
cs
author writeup to corCTF 2023’s unsolved pwnable, where competitors must exploit a previously unexploitable primitive: universal blind stack write