The Curious Engineer

All blogs / Security

elttam

elttam.com

Explore elttam's security research library, including vulnerability disclosures, tooling releases, technical blog posts, and CTF writeups. Produced by our consultants pushing the boundaries of offensive security.

SecurityReverse engineeringRuby / RailsWeb development

’26
Posts
43 from 24 Mar 2026 to 23 Sep 2026
Posting
weekly (43 in the last year)
Kind
company blog
Feed
https://www.elttam.com/blog/rss.xml

2026 43

  1. ATT&CKing TACACS+ to Pwn Your Network via a Pre-Auth RCE - elttam
  2. Ruby Marshal Kick-off Gadgets - elttam
  3. Ruby 4.0 Universal RCE Deserialization Gadget Chain - elttam
  4. Cruising for Shells in Flowise - elttam
  5. Your House Has an FFmpeg Problem - elttam
  6. PwnAssistant - Controlling /home's via a Home Assistant RCE - elttam
  7. Exploiting Auth0 Defaults in XSS Attacks - elttam
  8. Jupyter Enterprise Gateway - From Notebook to Kubernetes Cluster Admin - elttam
  9. Golang code review notes II - elttam
  10. Gaining console access to the WAG54G home router - elttam
  11. Simple Bugs With Complex Exploits - elttam
  12. Vuln research on the WAG54G home router - elttam
  13. Playing with canaries - elttam
  14. A Monocle on Chronicles - elttam
  15. Talkback
  16. A collection of semgrep rules for security researchers and product security teams to leverage
  17. RE of LR3 - elttam
  18. A collection of publications for advisories write ups and presentations
  19. Intro to SDR and RF Signal Analysis - elttam
  20. Exploring the STSAFE-A110 - elttam
  21. ESP-IDF setup guide - elttam
  22. plORMbing your Django ORM - elttam
  23. plORMbing your Prisma ORM with Time-based Attacks - elttam
  24. Ruby 2.x Universal RCE Deserialization Gadget Chain - elttam
  25. Remote LD_PRELOAD Exploitation - elttam
  26. ORM Leaking More Than You Joined For - elttam
  27. Lua SUID Shells - elttam
  28. New Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails - elttam
  29. Fuze Multi-Card Technology Security Review - elttam
  30. Hacking with Environment Variables - elttam
  31. Golang code review notes - elttam
  32. EFF secure messaging scorecard review - elttam
  33. Gotchas in Email Parsing - Lessons From Jakarta Mail - elttam
  34. Abusing Amazon VPC CNI plugin for Kubernetes - elttam
  35. Building Hardened Docker Images from Scratch with Kubler - elttam
  36. Cracking the Odd Case of Randomness in Java - elttam
  37. DUCTF 2024 ESPecially Secure Boot Writeup - elttam
  38. Attacks on GCM with Repeated Nonces - elttam
  39. Keeping up with the Pwnses - elttam
  40. Are you winning if you're pinning? - elttam
  41. Tuya IoT and EZ Mode Pairing - elttam
  42. Why I recommend Chrome to family... - elttam
  43. A review of the EFF secure messaging scorecard... - elttam