41554 blogs · [ { "id": "01a087eb-b547-73d9-9d3c-0575a94fd6ff", "title": "Popping an alert from a sandboxed WebAssembly module", "url": "https://th0mas.nl/2025/08/19/popping-an-alert-from-a-sandboxed-webassembly-module/", "published_at": "2025-08-19T00:00:00+00:00" }, { "id": "01a087eb-b547-73d9-9d3c-0575aa29896f", "title": "Spoofing OpenPGP.js signature verification (write-up)", "url": "https://th0mas.nl/2025/06/15/spoofing-openpgp.js-signature-verification-write-up/", "published_at": "2025-06-15T00:00:00+00:00" }, { "id": "01a087eb-b547-73d9-9d3c-0575aa75cabc", "title": "Exploiting LibreOffice (write-up)", "url": "https://th0mas.nl/2025/02/12/exploiting-libreoffice-write-up/", "published_at": "2025-02-12T00:00:00+00:00" }, { "id": "01a087eb-b547-73d9-9d3c-0575ab41b0a1", "title": "Tetris in a PDF", "url": "https://th0mas.nl/2025/01/12/tetris-in-a-pdf/", "published_at": "2025-01-12T13:00:00+00:00" }, { "id": "01a087eb-b547-73d9-9d3c-0575aba5a39e", "title": "Ghostscript security research (write-up series)", "url": "https://th0mas.nl/2024/10/31/ghostscript-security-research-write-up-series/", "published_at": "2024-10-31T00:00:00+00:00" }, { "id": "01a087eb-b547-73d9-9d3c-0575ac91f9d5", "title": "Arbitrary JavaScript execution in PDF.js (write-up)", "url": "https://th0mas.nl/2024/05/20/arbitrary-javascript-execution-in-pdf.js-write-up/", "published_at": "2024-05-20T00:00:00+00:00" }, { "id": "01a087eb-b547-73d9-9d3c-0575ad74f942", "title": "kb1: a fully DIY mechanical keyboard", "url": "https://th0mas.nl/2024/04/18/kb1-a-fully-diy-mechanical-keyboard/", "published_at": "2024-04-18T19:00:00+00:00" }, { "id": "01a087eb-b547-73d9-9d3c-0575ad8d0531", "title": "Overclocking a Gameboy Color using a Raspberry Pi Pico", "url": "https://th0mas.nl/2023/12/28/overclocking-a-gameboy-color-using-a-raspberry-pi-pico/", "published_at": "2023-12-28T12:13:00+00:00" }, { "id": "01a087eb-b547-73d9-9d3c-0575ae70ebe3", "title": "Vulnerability write-up - \"Dangerous assumptions\"", "url": "https://th0mas.nl/2023/02/24/vulnerability-write-up-dangerous-assumptions/", "published_at": "2023-02-24T19:20:00+00:00" }, { "id": "01a087eb-b547-73d9-9d3c-0575af1349ca", "title": "Porting Doom to a payment terminal", "url": "https://th0mas.nl/2022/07/18/porting-doom-to-a-payment-terminal/", "published_at": "2022-07-18T09:00:00+00:00" }, { "id": "01a087eb-b547-73d9-9d3c-0575af809ec1", "title": "dromaius: a C++ GameBoy emulator and debugger", "url": "https://th0mas.nl/2021/04/25/dromaius-a-c-gameboy-emulator-and-debugger/", "published_at": "2021-04-25T00:00:00+00:00" }, { "id": "01a087eb-b547-73d9-9d3c-0575afc9235e", "title": "Exploiting a stack-based buffer overflow in practice", "url": "https://th0mas.nl/2020/11/17/exploiting-a-stack-based-buffer-overflow-in-practice/", "published_at": "2020-11-17T08:00:00+00:00" }, { "id": "01a087eb-b547-73d9-9d3c-0575afd2576d", "title": "Getting root on a Zyxel VMG8825-T50 router", "url": "https://th0mas.nl/2020/03/26/getting-root-on-a-zyxel-vmg8825-t50-router/", "published_at": "2020-03-26T07:43:00+00:00" }, { "id": "01a087eb-b547-73d9-9d3c-0575b0d02a96", "title": "Rendering recursive portals with OpenGL", "url": "https://th0mas.nl/2013/05/19/rendering-recursive-portals-with-opengl/", "published_at": "2013-05-19T17:26:56+00:00" }, { "id": "01a087eb-b547-73d9-9d3c-0575b10348fc", "title": "Tetris Friends AI", "url": "https://th0mas.nl/2012/12/24/tetris-friends-ai/", "published_at": "2012-12-24T15:29:11+00:00" }, { "id": "01a087eb-b547-73d9-9d3c-0575b1f9c144", "title": "External publications", "url": "https://th0mas.nl/publications/", "published_at": null } ] posts Claim your blog

Back to th0mas.nl

Blog · corpus.blog/blogs/th0mas.nl/posts

th0mas.nl

th0mas.nl

2025

Popping an alert from a sandboxed WebAssembly module original ↗

19 Aug 2025

Spoofing OpenPGP.js signature verification (write-up)original ↗

15 Jun 2025

Exploiting LibreOffice (write-up)original ↗

12 Feb 2025

Tetris in a PDF original ↗

12 Jan 2025

2024

Ghostscript security research (write-up series)original ↗

31 Oct 2024

Arbitrary JavaScript execution in PDF.js (write-up)original ↗

20 May 2024

kb1: a fully DIY mechanical keyboard original ↗

18 Apr 2024

2023

Overclocking a Gameboy Color using a Raspberry Pi Pico original ↗

28 Dec 2023

Vulnerability write-up - "Dangerous assumptions"original ↗

24 Feb 2023

2022

Porting Doom to a payment terminal original ↗

18 Jul 2022

2021

dromaius: a C++ GameBoy emulator and debugger original ↗

25 Apr 2021

2020

Exploiting a stack-based buffer overflow in practice original ↗

17 Nov 2020

Getting root on a Zyxel VMG8825-T50 router original ↗

26 Mar 2020

2013

Rendering recursive portals with OpenGL original ↗

19 May 2013

2012

Tetris Friends AI original ↗

24 Dec 2012

Undated

External publications original ↗

—