publikacje
Książki, papers i long-form.
Niezależne książki, papers peer-reviewed i wybrane artykuły. W sprawie mediów, wywiadów i wystąpień zobacz media i wystąpienia.
- 2024na życzenieBook · Independent
Field Manual: Modern Web Exploitation
A practitioner's guide to current-era web attack surface — request smuggling, prototype pollution, SSRF chains, and identity provider abuse.
- 2025na życzeniePaper · WOOT '25
PKCE Downgrade Attacks Against Public OAuth Clients
Formal analysis of method negotiation in widely deployed OAuth libraries and three CVE-class findings.
- 2024na życzenieArticle · Phrack #72
AD CS Revisited: Two Years After ESC1
What changed, what didn't, and why most environments are still vulnerable to certificate template abuse.