This spring marked the 30th anniversary of the public uncovering of the so-called KGB Hack, bringing with it a number of new articles rem...

This is the first part of exploiting ffmpeg. A huge thank you to Paul Cher for the excellent work on recording the process and sharing his research. I merely edited it together.

Vulnerable Version: https://github.com/FFmpeg/FFmpeg/tree/d903b4e3ad4a81b3d…

Deeper look at CVE-2016-10190. A Heap overflow caused by a negative HTTP chunksize.

Vulnerable Version: https://github.com/FFmpeg/FFmpeg/tree/d903b4e3ad4a81b3dd79f12c2f3b9cb16e511173
Paul on Twitter: https://twitter.com/__paulch
LiveOverflow Podcast: ht…

Paul shows us another exploit for FFmpeg. The vulnerability is located in the RTMP protocol. While working with the binary format of the protocol requires a lot of work, the exploit itself is very easy.

Vulnerable Version: https://github.com/FFmpeg/FFmp…

Our guest for this episode of the OWASP DevSlop Show is Paul Ionescu; Paul is a Security Architect and OWASP Chapter Leader from Ottawa, Canada. He is the creator and maintainer of the Secure Coding Dojo open source project.

Code review is, hopefully, part…

While working for browser-based attacks on the URL bar, I learned a way where it was still possible to spoof address bar in safari. None…

Facebook bug bounty remote crash bug

A story of turning an Informative bug to critical bug

Since the dawn of the World Wide Web, attackers have been involved in discovering techniques to compromise systems. Likewise security…