Vaelio

I had the pleasure to go to BreizhCTF 2k25 with Formind, and i thought i would write some writeups about some chall i have done. So this will be a mini serie, depending on the time i have. This time the challenge is Otis_10 and is basically a Use-After-Free

Lets say i went down in the rabbit hole of making my own very simple but limited dns server in order to learn the specs of it and for some fun. Now that all my laptops are on NixOS, i've got to make a service module to use.

A few years ago i decided to get rid of Burpsuite because of its ram consumption and almost stale development (That last point is not true anymore). I decided i would learn rust by making my own burplike. At that time i was on Archlinux so everything was fine, but

I work at Formind since May 2023 and during one of our pentest, i encountered an app using the Nashorn Javascript engine from OpenJDK. An embedded javascript interpreter for java applications. After some digging in the source code, I discovered this bug which led to RCE. Here are the details:

Binary exploitation, or pwn, can be a little daunting for new comers. Here you'll have all the tools needed to get you starting, along with a collection of documents and links i found useful. We'll focus on exploiting Linux binaries (ELF), but you can transpose most

This is Vaelio's blog, a brand new site by Vaelio that's just getting started. Things will be up and running here shortly, but you can subscribe in the meantime if you'd like to stay up to date and receive emails when new content is