01 / FORCEPOINTRED TEAM CASE STUDY
Forcepoint Endpoint One: hidden Python console
An initial access technique developed during red team preparation, with analysis of the endpoint client and the vendor disclosure.
PERSONAL SECURITY RESEARCH
Research.
My personal technical writing continues here: vulnerability research, exploit development, and red team case studies. I now work through Cylantro Labs ↗, the cybersecurity company I founded.
START HERE
Selected research
Three public studies that represent my work across red teaming, Windows security, and exploit development.
02 / MICROSOFTWINDOWS CASE STUDY
Windows Shift+F10 bypass in an Autopilot scenario
A chained path from the Windows setup environment to elevated access, documented through a real penetration test.
03 / PANDORA FMSEXPLOIT DEVELOPMENT
Pandora FMS: chained XSS and .htaccess RCE
A chained exploit using a file upload path and .htaccess overwrite. The custom .kpmghungary extension was a nod to my work at KPMG Hungary. CVE-2021-36697 and CVE-2021-36698.
PUBLICATIONS
All research
Explore my technical publications below. I will keep adding personal research here.