company

We're Hiring!

March 12, 2026

We’re hiring! We are currently looking for a Penetration Tester and a Senior Red Teamer. Check out our open positions and reach out if you think you’d be a great fit.

Other News

RESEARCH
No Leak, No Problem – Bypassing ASLR with a ROP Chain to Gain RCE
November 10, 2025
Following a previous post on ARM exploitation, this post walks through extracting and analyzing modern IoT firmware to discover a previously unknown vulnerability. We then construct an ARM ROP chain that bypasses ASLR without an address leak to achieve unauthenticated RCE.

ADVISORY
[MZ-25-03] INSTAR 2K+ and 4K Series
August 12, 2025
Unauthenticated Remote Code Execution (RCE) in INSTAR 2K+ and 4K Series IP cameras