Half satisfied because a zero day I found in February 2025 has unluckily been patched in April 2026 😢, it was a tricky use-after-free in Adobe Acrobat Reader's Escript.api 😄. Here is my write-up, with a video PoC popping calc as a bonus: https://t.co/SrXRvMo8f0
We’re opening the Exodus research vault.
Over the coming weeks, we’ll publish technical writeups highlighting vulnerability research, exploit development, and deep reverse engineering from our team.
First up: Michele Campa’s Adobe Acrobat Reader Escript.api use-after-free RCE.
https://t.co/iycMuZQLix
#VulnerabilityResearch #ExploitDevelopment #ReverseEngineering #OffensiveSecurity #CyberSecurity
A zero day I found last year has been patched on October (CVE-2025-55680) :(, it was a nice and easy patch bypass. Here the write-up https://t.co/70ZglevS15
So like. Time to be vulnerable for a minute and talk about mental health as it relates to research. Because it’s tough, you know, open-ended research (as are many careers). That constant fear of failure in the face of tasks that are sometimes literally impossible.
@i0n1c What other features keep you from switching to Ghidra or binary ninja for that kind of work? I expect the motivated OSS community to cohere around Ghidra, so I think it's more likely that you'll get the missing features in Ghidra
(Especially if you tell me these features)