Selected work
Research
A record of vulnerability research, exploit development, industrial control system security, and conference work.
01
Publications
Technical papers and exploitation research.
Bug Hunting: From Advisory to PoC (Triggering CVE-2015-1929)PDF · English
Use After Free Bugs & Browser ExploitationPDF · Turkish
Windows Mobile ARM ExploitationPDF · Turkish
CVE-2012-4792: Internet Explorer Use After Free AnalysisPDF · Turkish
Heap Overflow and ExploitationPDF · Turkish
Discovering RPC VulnerabilitiesPDF · Turkish
02
Vulnerability research
Selected discoveries, advisories, and proof-of-concept work.
Microsoft Office Remote Code ExecutionCVE-2015-6093
Microsoft Windows Mobile Double Free Vulnerability2010 · No CVE
Windows Kernel Information Disclosure VulnerabilityCVE-2017-0167
PROGEA Movicon Remote Information DisclosureCVE-2014-0778
Schneider Electric IGSS SCADA Memory CorruptionCVE-2011-4537
Invensys Wonderware SCADA Buffer OverflowCVE-2012-0257
3S CoDeSys SCADA Buffer Overflow VulnerabilityICS alert
HTC Touch2 Media Player Memory Corruption VulnerabilityAdvisory
Adobe Shockwave Player Memory CorruptionCVE-2011-2122
03
Conference talks
Selected international presentations.