Viewing profile — redfr0g

How Striga uncovered a critical sandbox escape and unsanitized node name injection in n8n's expression engine, chaining them into full Remote Code Execution.

I think "as long as it was not a terminating action" is crucial here. The way how Cloudflare dashboard is designed right now may put you in false sense of security by implying that…

Cybersecurity and research blog: https://www.brzozowski.io/

I've released an application that can speed up security assessment reporting process by automating report writing using predefined vulnerability database and report templating usin…

Blog post disclosing security research done on LG WebOS 'Signage' TVs.