Authors

Alex Manson

Subscribe:.rss.atom.json.md

Publishes 1 feed

• Alex Manson

  Security researcher and SRE. Writing about vulnerability research, AI, and the practical stuff I figure out along the way.

  10 posts · theirs

Lately

• Sixteen strangers and a shared obfuscator: mapping the wool scene

  Alex Manson · 2026-07-27

• The Trade Desk is on your health portal, your bank, and the lottery

  Alex Manson · 2026-07-26

• Forging the government’s lottery: China’s civic apps run on a shared reward backend with no real secret

  Alex Manson · 2026-07-15

• Farming the farmers: smallfawn’s JD login tool routes harvested credentials to their own server

  Alex Manson · 2026-06-28

• A weekend in the wool: mapping a Chinese reward-farming underground from one GitHub repo

  Alex Manson · 2026-06-22

• The wool DRM, part 2: the Rust wall I didn’t crack

  Alex Manson · 2026-06-22

• The wool DRM, part 1: the Cython loader I cracked

  Alex Manson · 2026-06-22

• DragonflyDB Lua sandbox escape via getmetatable(_G) metatable override

  Alex Manson · 2026-06-09

• HashiCorp Nomad FIFO symlink attack (CVE-2026-6959, CVE-2026-8052)

  Alex Manson · 2026-05-17

• RCE and arbitrary file write in Vitess vtbackup via untrusted MANIFEST fields

  Alex Manson · 2026-05-17

Everything on this page was read from markup Alex Manson published — a rel="me" link, an h-card, or the feed’s own author element. Nothing was inferred from anywhere else. To correct or remove it, get in touch. Machine-readable: JSON