ANSI Escape Code Injection in OpenAI's Codex CLI Leading to RCE
How a simple unsanitized model parameter in Codex CLI leads from terminal spoofing to remote code execution
/home/dganev
Dimitar's personal blog!
Latest posts
Bypassing VSCode Copilot's Premium Requests
Bypassing VSCode Copilot's premium requests using an infinite loop
Reverse Engineering: "Tzar The Burden of the Crown" - Part 1 (WDT Files)
Reverse Engineering: "Tzar The Burden of the Crown"
Implementing custom autocomplete in VSCode
Implementing custom autocomplete in VSCode
Bulgarian OSINT Guide
Guide to OSINT techniques for Bulgarian investigations.
Tracking Down the Bulgarian Marketplace Scams
Investigation into Bulgarian marketplace scams.
Static Analysis Research - Windows PE
Research on static analysis of Windows Portable Executable files.
Using DNS as C2 Communication - Evasive Techniques (Part 3)
Using DNS for command and control communication as an evasive technique.
Dynamic Linker Hijacking Experiments - Evasive Techniques (Part 2)
More experiments with dynamic linker hijacking techniques.
Dynamic Linker Hijacking Experiments - Evasive Techniques (Part 1)
Experiments with dynamic linker hijacking techniques for evasion.
Create Plugin Architecture With Python
Creating a plugin architecture in Python using subclasses and decorators.
Simple Fishing Bot for World of Warcraft
A simple fishing bot for World of Warcraft using Windows API and Python.
STIX/TAXII - Complete Knowledge
Complete knowledge about STIX and TAXII for threat intelligence.
Installing Private Packages in Docker Image - Notes
Quick notes about how to forward an ssh agent and other tricks regarding the installation of python packages.