cornfield · notes from the cornfield. building and breaking stuff.

sc4r3cr0w

building and breaking stuff.
security researcher · cve author · systems programmer

the cornfield

research 12

2026.08.14 Half a vulnerability each http-request-smuggling

2026.07.15 declaw ssl-unpinning

2026.06.14 Mantis llm

writeups 58

2026.09.06 HTB Fortress: Jet htb

2026.09.03 HTB: BlockSynergy htb

2023.09.03 HTB: CozyHosting htb

2023.08.29 HTB: Zipping htb

2023.08.28 HTB: Pilgrimage htb

cves 12

2026.06.24 CVE-2026-49469 ldap-injection

2026.06.01 CVE-2026-42358 info-disclosure

2026.05.21 CVE-2026-47761 stored-xss

2026.04.03 CVE-2026-29047 sql-injection

2024.04.26 CVE-2024-33828 command-injection

view all cves →

there's nothing to fear but fear itself