~/research/notes

Hacking

7 posts

2026

  1. ios 17 min read

    Jailbreaking the iPhone 3GS from Scratch, Part 3: Bypassing the Boot Chain

    Jailbreaking the iPhone 3GS from Scratch, Part 3: Bypassing the Boot Chain Note: I am always learning. This series is a study project, not a definitive guide, and I will certainly …

  2. ios 28 min read

    Jailbreaking the iPhone 3GS from Scratch, Part 2: Reverse Engineering the BootROM

    Jailbreaking the iPhone 3GS from Scratch, Part 2: Reverse Engineering the BootROM Note: I am always learning. This series is a study project, not a definitive guide, and I will …

  3. ios 20 min read

    Jailbreaking the iPhone 3GS from Scratch, Part 1: initial access

    Jailbreaking the iPhone 3GS from Scratch, Part 1: initial access Note: I am always learning. This series is a study project, not a definitive guide, and I will certainly make …

  4. writeup 7 min read

    phpIPAM 1.7.4 - Second Order SQL Injection via subnetOrdering

    Second Order SQL Injection in phpIPAM 1.7.4 (CVE-2026-4189) Back in 2022, I found a SQL injection in phpIPAM 1.4.4 (CVE-2022-23046) via the BGP mapping search feature. That was a …

2024

  1. writeup 6 min read

    Nasa Path Traversal and XSS (waf bypass)

    Exploit Path Traversal and XSS in NASA Subdomains In this post, I’ll share my journey of discovering two vulnerabilities on NASA subdomains (Just 4 fun). With a bit of luck (and a …

2023

  1. writeup 6 min read

    PHPIPAM CVE

    TL;DR This write up is about a SQL injection which I found 4 days after another researcher reported it :/, however, because of the fact that I haven’t found any write ups or …

2022

  1. writeup 4 min read

    iOS Anti-Tampers Bypass

    Hi everyone, in this blog i'm going to explain a little bit of my journey to solve a iOS challenge proposed by @as0ler. The Challenge can be found at the following link: …