On the Effectiveness of Mutational Grammar Fuzzing

A Google Project Zero write-up describing a technique for testing race conditions using memory access tracing and stack-based delay injection.

A Google Project Zero post describing an attempt to build a zero-click exploit chain to root for the Pixel 10, following their earlier two-exploit Pixel 9 chain.

A Google Project Zero post detailing a bypass of Windows' Administrator Protection feature through abuse of UI Access, one of nine bypasses found and fixed.

A Google Project Zero analysis of Windows 11 25H2's Administrator Protection feature, which replaces UAC, and methods for bypassing it.

Part 7 of the Windows Registry Adventure series, mapping which Windows components parse registry data and identifying the most promising attack surface for deeper research.

Part one of a macOS audio series: building a fuzzer for CoreAudio by sending Mach messages, covering the attack surface, harness design, and early results.