spiridow

Recent Submissions

1. 1. ▲ How We Exploited Qodo: From a PR Comment to RCE and AWS Admin Key – Leaked Twice (kudelskisecurity.com) 1 point · 2 months ago · 0 comments
2. 2. ▲ How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos (research.kudelskisecurity.com) 687 points · 8 months ago · 227 comments
3. 3. ▲ Fuzzomatic: Using AI to Automatically Fuzz Rust Projects from Scratch (research.kudelskisecurity.com) 3 points · 2 years ago · 0 comments
4. 4. ▲ Polynonce: A Tale of a Novel ECDSA Attack and Bitcoin Tears (research.kudelskisecurity.com) 3 points · 3 years ago · 0 comments
5. 5. ▲ Practical attacks against attribute-based encryption (research.kudelskisecurity.com) 3 points · 4 years ago · 0 comments
6. 6. ▲ Automatically Fix Security Issues at the Source (research.kudelskisecurity.com) 2 points · 4 years ago · 0 comments
7. 7. ▲ Oramfs: Resizable ORAM, Remote Storage Agnostic, Written in Rust (research.kudelskisecurity.com) 3 points · 4 years ago · 0 comments
8. 8. ▲ Advancing Rust Support in Semgrep (research.kudelskisecurity.com) 8 points · 5 years ago · 0 comments
9. 9. ▲ Replacing passwords with FIDO2 (passthesalt.ubicast.tv) 2 points · 5 years ago · 0 comments
10. 10. ▲ FIDO2: Solving the Password Problem (research.kudelskisecurity.com) 4 points · 6 years ago · 1 comment