Security Research and PoC

Log4Shell Analysis

1. Log4Shell (CVE-2021-44228)
2. Log4Shell Follow Up (CVE-2021-45046 and CVE-2021-45105)
3. JNDI/LDAP Remote Code Execution (JNDI LDAP RCE vulnerability using Jackson)
4. Jackson exploit leading to RCE (Another example of Jackson based RCE)

Research on Prototype Pollution in Node.js applications

1. JavaScript Prototype Pollution (Analysis of Prototype Pollution leading to RCE)