June 2026
2-Click Remote Code Execution in Meccha Chameleon
Achieving remote code execution on every player in a game lobby through a malicious Steam Workshop map.
March 2026
Infinite Bouldering Passes - Identifying Payment Logic Flaws
And gaining access to hundreds of climbing gyms across the US in the process.
Jan 2026
AuthFinder and Secretsdump-ng
Releasing some CCDC redteam tooling which help automate the process of enumerating access and dumping credentials.