Exploit Development on

From Blob to Boom: Insecure Deserialization in FinPro CRM

Fri, 04 Aug 2023 00:00:00 +0000

Insecure Deserialization in FinPro CRM Client (x86)
#

Prologue: Old Habits, Unsafe Casts
#

I was poking through a legacy CRM tool called FinPro — the kind your dad’s office might still be using. Clunky GUI, startup splash screen, and an installer that required admin rights. Perfect vintage.

Signed to Compromise: Kernel Overflow in XLogDriver.sys

Sat, 10 Jun 2023 00:00:00 +0000

Signed Driver Exploit in XLogDriver.sys (x64 Kernel)
#

Prologue: A Signed Invitation to Ring-0
#

This one hit different. I was sifting through a bunch of random vendor drivers, most of them dusty utilities for things like USB logs and peripheral diagnostics. Nothing fancy. But one caught my eye: XLogDriver.sys.

Swipe to Shell: Exploiting a Buffer Overflow in PaySafeTech Daemon

Fri, 17 Mar 2023 00:00:00 +0000

Buffer Overflow in PaySafeTech Payment Daemon
#

Prologue: The Ghost in the Machine
#

The smell of late-night coffee and burnt solder still hung in the air. It was one of those nights — quiet, focused, and laced with the promise of uncovering something… forgotten.

Exploit Development on

From Blob to Boom: Insecure Deserialization in FinPro CRM

Insecure Deserialization in FinPro CRM Client (x86) #

Prologue: Old Habits, Unsafe Casts #

Signed to Compromise: Kernel Overflow in XLogDriver.sys

Signed Driver Exploit in XLogDriver.sys (x64 Kernel) #

Prologue: A Signed Invitation to Ring-0 #