StalkR's Blog

In the last two blog posts, I described a challenge and exploits to get code execution from arbitrary Go code only allowing the fmt packa...

In my last blog post , I described The Gomium Browser, a pwn challenge of the Google CTF 2019 finals that 4 teams (pasten, 5BC, p4, A*0*E) ...

Go is becoming more and more popular as a programming language and getting more scrutiny from a security point of view. You might remember m...

Challenge #18 "A small bug" was a common TOCCTOU bug very interesting to exploit reliably. @hellman already did a write-up on...

I recently learned a cool technique for exploiting exec race conditions. It was mentioned in a comment by Julien Tinnes about the 2009 pul...