• The long and winding road to safe browser-based cryptography Published on 2024-12-19, securedrop.org, Contributor
• How to BGP from your basement and other tales Published on 2024-12-18, osservatorionessuno.org, Author
• Introducing Securedrop Protocol Published on 2024-05-06, securedrop.org, Co-Author
• How to research your own cryptography and survive Published on 2024-04-03, securedrop.org, Co-Author
• Anatomy of a whistleblowing system Published on 2024-02-20, securedrop.org, Co-Author
• SecureDrop multiple local privilege escalations Published on 2022-12-12, securedrop.org, Co-Author
• Google Summer of Code for Qubes-os: automatic port forwarding Published on 2021-09-15, git.lsd.cat, Author
• A hybrid Capture-the-Flag challenge for an A/D competition Published on 2021-01-01
• Exploiting a Linux-based payment terminal part 1: reversing to root Published on 2020-07-03
• How to port Openwrt to an unknown device with a supported SoC Published on 2020-04-15
• Juniper Pulse Connect Secure MITM Code Execution Published on 2020-03-30
• Nokia-Alcatel FTTH CPE reverse engineering and WPA/admin keygen Published on 2020-01-10, Co-Author
• Alcatel-Lucent OmniVista 4760/8770 Remote Code Execution Published on 2019-12-20
• Websphere Portal for penetration testers Published on 2019-03-27
• Oracle SQL for penetration testers Published on 2018-11-20
• CTF Writeup: INS'hAck CTF 2018 - Curler Published on 2018-04-09, jbz.team, Co-Author
• Quick Windows and Linux LAN pivoting Published on 2018-02-17
• CTF Writeup: EkoParty CTF 2017 - silkroad Published on 2017-09-18, jbz.team, Author
• CTF Writeup: PlaidCTF 2017 - SHA-4 Published on 2017-04-23, jbz.team, Co-Author
• CTF Writeup: PlaidCTF 2017 - Echo Published on 2017-04-23, jbz.team, Co-Author