sw-cache-forge is a small standalone tool that rewrites the cached JavaScript of a Chromium service worker. It has zero dependency on GAP and works on any SW cache entry you can write to, but it’s ...

Yesterday, I had the pleasure of presenting at Barbhack 2026 an extended and in-depth version of my research on browser extensions. Where the short Beerump format got me to focus solely on the pers...

A few months ago I published the GAP research paper and the stomp.py tooling. The technique worked but the workflow was manual, you had to run stomp twice and handle the two-phase injection sequenc...

TL;DR - When you click “Open Anyway” on a file Gatekeeper blocked, macOS does exactly one thing: it sets a single bit in an extended attribute. Here’s which bit, and why it unlocks execution. The...

Overview BELoader is a Go reimplementation of stomp, rewritten as a standalone Windows executable with zero runtime dependencies. Where stomp required Python and a deployment archive, BELoader co...

Last night I gave my first public talk at Beerump — a friendly rump session format where everyone gets a approximately 10 minutes to present a cybersecurity-based topic. A great first experience sp...

Browser extensions are an underestimated attack surface. They run natively in the browser, are trusted by design, have access to cookies, network requests, and every page the user visits - and most...

Browser extensions are a massively underestimated attack surface. They run natively in the browser, have access to cookies, network requests, and every page the user visits, and most EDRs don’t eve...

Originally published on Medium. Hello cybersecurity enthusiasts, some weeks ago, during a reverse engineering stuff, I heard about ghidra-mcp. Instead of ignoring this tool, my curiosity was trig...

Originally published on Medium. Hi everyone, it’s been a while. Recently, I worked on an ESP32 project which aimed to perform packet injection attacks in IEEE 802.11 communication. Instead of spe...