Notes from the lab.
Building the smallest ELF program
From a default 16,704-byte hello world down to 80 bytes — stripping the toolchain layer by layer, removing sections, and overlapping the ELF and program headers.
Javascript engine exploitation methodology
Recording of my talk on Javascript engine exploitation methodology, given in French at Quarks in the Shell 2023 (Quarkslab).
Vulnerability research and ActiveX controller exploitation
Reverse-engineering and exploiting CVE-2011-4187, a stack buffer overflow in Novell iPrint Client's ActiveX component, from CVE ID to arbitrary code execution on Windows XP.