For the complete documentation index, see llms.txt. This page is also available as Markdown.
Sfoffo's Research Blog
Welcome to my space for documenting offensive security research.
Here I share vulnerability findings, write-ups, and practical insights that highlight techniques, pitfalls, and lessons learned from real-world security testing.
Latest Articles
Beyond a Fly in the Wild
Breaking down WildFly’s defenses and the alternative file upload attack paths adversaries may pursue when direct code execution isn’t possible.
CVE-2024-42845 - Invesalius3 RCE
Remote Code Execution in DICOM import due to unsafe use of eval in coordinates parsing.
Streamlining CVE Research using GitHub
Highlighting GitHub's vulnerability reporting workflow and the CVEs discovered during this process.
