Scanning the Scanners: Turning Security Vendors into Supply-Chain Weapons
Slides, tools, and links from my Black Hat USA 2026 briefing on hosted code scanners that execute the untrusted repositories they process.
Abusing OS Patch Management in GCP for Lateral Movement and Persistence
Using OS patch management in GCP to pivot and maintain access to compute instances.
Analysis and Discovery of CVE-2020-13693
Source code analysis to find privilege-escalation in 300k sites.
Context Menu persistence using DLL Hijacking
Using DLL hijacking to gain persistence in explorer.exe.