Research / Publications

Bug Hunting: From Advisory to PoC (Triggering CVE-2015-1929)

Use After Free Bugs & Browser Exploitation – Turkish

Windows Mobile ARM Exploitation – Turkish

CVE-2012-4792 IE Use After Free Analysis – Turkish

Heap Overflow and Exploitation – Turkish

Discovering RPC Vulnerabilities – Turkish

Microsoft Office Remote Code Execution - CVE-2015-6093

Microsoft Windows Mobile Double Free Vulnerability - 2010 (no-cve)

Windows Kernel Information Disclosure Vulnerability - CVE-2017-0167

PROGEA Movicon Remote Information Disclosure - CVE-2014-0778

Schneider Electric IGSS SCADA Memory Corruption - CVE-2011-4537

Invensys WonderWare SCADA Buffer Overflow Vulnerability - CVE-2012-0257

3S CoDeSys SCADA Buffer Overflow Vulnerability

HTC Touch2 Media Player Memory Corruption Vulnerability

Adobe Shockwave Player Memory Corruption CVE-2011-2122

Speaker at POC2015, Korea: Breaking Font Parsers

Speaker at CODEBLUE 2014, Japan : SCADA Software or Swiss Cheese Software?

Speaker at Swiss Cyber Storm 2011, Switzerland: Bug Hunting in Windows Mobile

Speaker at CONFidence 2010, Poland: Analysis of Software Vulnerabilities