- Attacking SSL VPN - Part 3: The Golden Pulse Secure SSL VPN RCE Chain, with Twitter as Case Study!
- Attacking SSL VPN - Part 2: Breaking the Fortigate SSL VPN
- Attacking SSL VPN - Part 1: PreAuth RCE on Palo Alto GlobalProtect, with Uber as Case Study!
- Operation Crack: Hacking IDA Pro Installer PRNG from an Unusual Way
- Hacking Jenkins Part 2 - Abusing Meta Programming for Unauthenticated RCE!(EN)
- Hacking Jenkins Part 1 - Play with Dynamic Routing (EN)