Shahriyar Jalayeri

  • Home
  • About
  • Blog
  • Portfolio

oldblog

  Reducing Code Coverage Overhead using "Disposable Probes" (Fuzzing) - 21 Mar 2018

  Improving Coverage Guided Fuzzing Using Simple Static Analysis - 01 May 2017

  Fuzzing and Instrumenting Windows Kernel - 27 Apr 2017

  Write up for Iranian Society of Cryptology CTF - 08 Sep 2015

  Defeating Windows Kernel Driver Singing Enforcement, Not That Hard! - 04 Nov 2012

  Pwnypot HoneyClient - 25 Sep 2012

  Windows Kernel Intel x64 SYSRET Vulnerability + Code Signing Bypass Bonus - 25 Aug 2012

  Bypassing EMET 3.5's ROP Mitigations - 08 Aug 2012

exploting

  Defeating Windows Kernel Driver Singing Enforcement, Not That Hard! - 04 Nov 2012

  Pwnypot HoneyClient - 25 Sep 2012

  Windows Kernel Intel x64 SYSRET Vulnerability + Code Signing Bypass Bonus - 25 Aug 2012

  Bypassing EMET 3.5's ROP Mitigations - 08 Aug 2012

re

  Write up for Iranian Society of Cryptology CTF - 08 Sep 2015

fuzzing

  Algorithm for Constructing Grammar Graph (Fuzzing) - 24 May 2022

  Reducing Code Coverage Overhead using "Disposable Probes" (Fuzzing) - 21 Mar 2018

  Improving Coverage Guided Fuzzing Using Simple Static Analysis - 01 May 2017

  Fuzzing and Instrumenting Windows Kernel - 27 Apr 2017

unix

  Authorization on Linux local IPC using SO_PEERCRED - 21 May 2022

  Rethinking SETUID root, Historical Approaches to Least Privilege - 01 Feb 2022

  Why setgid to nobody? - 17 Dec 2021

  The Confused Deputy and Capability Systems - 22 Nov 2021

  What is PR_SET_CHILD_SUBREAPER what is it related to double-forked daemon? - 17 Nov 2021

caps

  Rethinking SETUID root, Historical Approaches to Least Privilege - 01 Feb 2022

  The Confused Deputy and Capability Systems - 22 Nov 2021

os

  Preemptive scheduling on 16-bit real-mode os? - 27 Sep 2022

sec-process

  A Methodology for Security Requirement Engineering - 04 Apr 2025

tpm

  TPM Fault Injection - 03 Sep 2025

  Point is not on the required curve! - 03 Sep 2025