Publications

2025

Sonar — Diving Into JumpServer: Attacker’s Gateway to Internal Networks (2/2)
March 25, 2025
Sonar — Diving Into JumpServer: Attacker’s Gateway to Internal Networks (1/2)
March 18, 2025

2024

Sonar — Government Emails at Risk: Critical Cross-Site Scripting Vulnerability in Roundcube Webmail
August 27, 2024
Insomni'hack 2024 — Diving Into JumpServer: The Public Key Unlocking Your Whole Network
April 25, 2024
Sonar — Pitfalls of Desanitization: Leaking Customer Data from osTicket
February 6, 2024

2023

Sonar — pfSense Security: Sensing Code Vulnerabilities with SonarCloud
December 11, 2023