News and resources from the Airoverflow team - offensive security, threat research, and web application hacking.
A process-wide SE_RESTORE_PRIVILEGE and a destination lock released four operations too early. Neither is a bug on its own; chained, they let a standard user overwrite TrustedInstaller-owned files in System32.
Diving into Wordpress Security. The art of unauthorized access through Route confusion and SQLi - CVE-2026-63030 CVE-2026-60137
IaC promised us freedom from clicking around cloud consoles like cavemen. It delivered, and also handed us new and exciting ways to hand our entire infrastructure to a stranger. Here's how not to do that.
Menu-driven heap challenges are stateful, so a raw byte fuzzer bounces off them. This guide builds a vulnerable heap note manager, then writes a structure-aware AFL++ harness that turns the fuzzer's bytes into menu operations and finds the bug for you.
A hands-on guide to coverage-guided fuzzing with AFL++: building instrumented targets, writing harnesses, and driving the Linux kernel under a local syscall fuzzer without cloud infrastructure.