cat /var/log/research/*
Blog
Write-ups on OS internals, vulnerability research, reverse engineering and other stuff I find interesting
// Featured
[CVE-2026-54424] Remote Code Execution, Arbitrary File Read and Hash Capture in Parsec as SYSTEM
How I found and exploited three different vulnerabilities in the Parsec app
Mon Apr 13 2026
[CVE-2022-48481] Dylib injection on Jetbrains Toolbox for macOS
How injecting a dylib in an app can result in a TCC bypass
Fri Apr 28 2023
Getting Started with Apple Endpoint Security Framework
In-depth guide on how to set up a new ES project and a VM capable of running and debugging it
Sat Mar 14 2026
// All Posts
[CVE-2022-48481] Dylib injection on Jetbrains Toolbox for macOS
How injecting a dylib in an app can result in a TCC bypass
Fri Apr 28 2023
Fri Apr 28 2023
Getting Started with Apple Endpoint Security Framework
In-depth guide on how to set up a new ES project and a VM capable of running and debugging it
Sat Mar 14 2026
Sat Mar 14 2026
[CVE-2026-54424] Remote Code Execution, Arbitrary File Read and Hash Capture in Parsec as SYSTEM
How I found and exploited three different vulnerabilities in the Parsec app
Mon Apr 13 2026
Mon Apr 13 2026