corpus.blog
56,966 blogs · [ { "id": "01a08c54-4131-73c5-8867-5c5dad5a7e7c", "title": "Open Wi-Fi Got Encrypted. Here's Why Your Rogue AP Still Works.", "url": "https://www.thexero.co.uk/wifi/open-wi-fi-got-encrypted/", "published_at": "2026-04-18T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5dad730154", "title": "Wireless Adapter Recommendations for Pentesters in 2025", "url": "https://www.thexero.co.uk/wifi/wifiadapters2025/", "published_at": "2025-12-13T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5dad98ac18", "title": "Hacking Hidden WiFi Networks", "url": "https://www.thexero.co.uk/wifi/hidden-wifi/", "published_at": "2025-06-14T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5dae11612e", "title": "Wireless Pivots: How Trusted Networks Become Invisible Threat Vectors", "url": "https://www.thexero.co.uk/wifi/wireless-pivots/", "published_at": "2025-05-31T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5dae1cb315", "title": "Cohort 1 Wrap-Up: Thank You and What's Next", "url": "https://www.thexero.co.uk/blog/cohort-1-wrapup/", "published_at": "2025-04-24T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5daf14c783", "title": "EAP-TLS Security: How Attackers Exploit Enterprise Wi-Fi Vulnerabilities", "url": "https://www.thexero.co.uk/wifi/breaking-eap-tls/", "published_at": "2024-09-19T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5daf9e0f48", "title": "The Evolution of Wi-Fi Security: From WEP to WPA3", "url": "https://www.thexero.co.uk/wifi/evolution-of-wifi-security-from-wep-to-wpa3/", "published_at": "2024-09-01T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5db05a4c03", "title": "Understanding Authentication in Enterprise Wi-Fi (Part 1)", "url": "https://www.thexero.co.uk/wifi/enterprise-wi-fi-security/", "published_at": "2024-08-10T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5db0f9ff24", "title": "802.11 Wi-Fi Explained: Control & Data Frames (Wireless Packets Part 2)", "url": "https://www.thexero.co.uk/wifi/understanding-wireless-packets-part2/", "published_at": "2024-07-22T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5db1f0e7f7", "title": "802.11 Wi-Fi Explained: MAC Frame Structure (Wireless Packets Part 1)", "url": "https://www.thexero.co.uk/wifi/wireless-packets-part1/", "published_at": "2024-07-13T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5db27e728e", "title": "Understanding Protected Management Frames - Part 2", "url": "https://www.thexero.co.uk/wifi/understanding-pmf-part2/", "published_at": "2024-06-28T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5db339f750", "title": "Understanding Protected Management Frames", "url": "https://www.thexero.co.uk/wifi/understanding-pmf/", "published_at": "2024-06-23T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5db3e931e7", "title": "PMKIDHunter — Fast PMKID Capture Script", "url": "https://www.thexero.co.uk/tools/pmkidhunter/", "published_at": "2024-03-10T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5db487ea31", "title": "Building a Compact XOR Encoder for Shellcode: A Step-by-Step Assembly Guide", "url": "https://www.thexero.co.uk/blog/building-a-compact-xor-encoder/", "published_at": "2020-11-12T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5db49463ca", "title": "Worldmail IMAP Exploit: Writing a Public SEH Buffer Overflow From Scratch", "url": "https://www.thexero.co.uk/exploit-development/worldmail-exploit/", "published_at": "2020-05-09T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5db5913db2", "title": "Abusing The Stack", "url": "https://www.thexero.co.uk/exploit-development/abusing-the-stack/", "published_at": "2020-04-26T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5db5f02f79", "title": "Corelan Advanced Exploit Development Review: Is It Worth It?", "url": "https://www.thexero.co.uk/blog/corelan-advanced-exploit-development/", "published_at": "2019-12-07T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5db68befa1", "title": "nullsploit: A Custom Python Exploitation Framework Built From Scratch", "url": "https://www.thexero.co.uk/tools/nullsploit-engine/", "published_at": "2019-05-03T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5db74761e3", "title": "Penetration Testing in Social Housing: My Interview With Housing Technology Magazine", "url": "https://www.thexero.co.uk/blog/housing-technology-interview/", "published_at": "2017-09-28T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5db7928b1c", "title": "Advisory: LDAPS Service Heap Memory Corruption Vulnerability - Symantec Encryption Management Server < 3.3.2 MP12", "url": "https://www.thexero.co.uk/advisories/sems-heap-memory-corruption/", "published_at": "2016-06-07T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5db7d66af5", "title": "Advisory: Local Privilege Escalation - Symantec Encryption Management Server < 3.3.2 MP12", "url": "https://www.thexero.co.uk/advisories/sems-privesc/", "published_at": "2016-06-07T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5db80d07d7", "title": "Advisory: OS Command Injection in Symantec Encryption Management Server < 3.3.2 MP12", "url": "https://www.thexero.co.uk/advisories/sems-command-exec/", "published_at": "2016-06-07T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5db8481a82", "title": "ConScan v1.2: Username Disclosure and Brute-Force Added to Concrete5 Scanner", "url": "https://www.thexero.co.uk/blog/conscan-updated/", "published_at": "2014-06-07T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5db8bf46a4", "title": "ConScan v1.2: Username Disclosure and Brute-Force Added to Concrete5 Scanner", "url": "https://www.thexero.co.uk/tools/conscan-updated/", "published_at": "2014-06-07T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5db966a3f9", "title": "Teaching Exploit Development at BSides London 2014: What I Learned From My First Workshop", "url": "https://www.thexero.co.uk/blog/bsides-london-exploit-development/", "published_at": "2014-05-04T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5dba0bb078", "title": "ConScan: A Black-Box Vulnerability Scanner for Concrete5 CMS", "url": "https://www.thexero.co.uk/tools/concrete5-cms-vulnerability-scanner/", "published_at": "2013-10-26T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5dba15372d", "title": "Security Advisory: Stored XSS in DEXs PM System WordPress Plugin v1.0.1", "url": "https://www.thexero.co.uk/advisories/dexs-pm-system-vulnerability/", "published_at": "2013-10-14T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5dba96eb43", "title": "SSL Private Key Password Cracker: A Tool Born From a Real Engagement", "url": "https://www.thexero.co.uk/tools/ssl-private-key-password-cracker/", "published_at": "2013-08-31T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5dbb83a1a8", "title": "HTTP Enum: Automated HTTP Enumeration and Web Server Fingerprinting Tool", "url": "https://www.thexero.co.uk/tools/http-enum/", "published_at": "2013-04-15T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5dbc802f2a", "title": "Bypassing ASLR: Techniques for Exploit Developers Who've Hit the Wall", "url": "https://www.thexero.co.uk/blog/bypass-aslr/", "published_at": "2012-04-15T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5dbcff07b6", "title": "TFTP Fuzzer: Finding Vulnerabilities in UDP-Based Protocols with Python", "url": "https://www.thexero.co.uk/tools/tftp-fuzzer/", "published_at": "2012-03-25T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5dbd453745", "title": "FTP Fuzzer: How I Found Real Bugs in FTP Servers with This Python Tool", "url": "https://www.thexero.co.uk/tools/ftp-fuzzer/", "published_at": "2012-01-27T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5dbdb5f64f", "title": "WiFi Episode 5: How to Uncover Hidden WiFi Networks and Crack WEP", "url": "https://www.thexero.co.uk/wifi/episode-5/", "published_at": "2010-11-14T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5dbdf886e7", "title": "WiFi Episode 4: WEP ARP Amplification — Cracking WEP Faster", "url": "https://www.thexero.co.uk/wifi/episode-4/", "published_at": "2010-10-29T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5dbec14f7d", "title": "WiFi Episode 3: How to Bypass WEP Shared Key Authentication", "url": "https://www.thexero.co.uk/wifi/episode-3/", "published_at": "2010-09-19T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5dbf81eaf4", "title": "WiFi Episode 2: How to Crack WEP Encryption (Including Clientless Networks)", "url": "https://www.thexero.co.uk/wifi/episode-2/", "published_at": "2010-09-10T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5dbfa6be5e", "title": "WiFi Episode 1: How to Hack WPA and WPA2 Personal Networks (The Basics)", "url": "https://www.thexero.co.uk/wifi/episode-1/", "published_at": "2010-08-29T00:00:00+00:00" }, { "id": "01a08c54-4131-73c5-8867-5c5dc005a9bc", "title": "About", "url": "https://www.thexero.co.uk/about/", "published_at": null } ] posts Claim your blog
Back to thexero.co.uk
Blog · corpus.blog/blogs/thexero.co.uk/posts

thexero.co.uk

thexero.co.uk

2026

Open Wi-Fi Got Encrypted. Here's Why Your Rogue AP Still Works.original ↗
18 Apr 2026

2025

Wireless Adapter Recommendations for Pentesters in 2025original ↗
13 Dec 2025
Hacking Hidden WiFi Networksoriginal ↗
14 Jun 2025
Wireless Pivots: How Trusted Networks Become Invisible Threat Vectorsoriginal ↗
31 May 2025
Cohort 1 Wrap-Up: Thank You and What's Nextoriginal ↗
24 Apr 2025

2024

EAP-TLS Security: How Attackers Exploit Enterprise Wi-Fi Vulnerabilitiesoriginal ↗
19 Sept 2024
The Evolution of Wi-Fi Security: From WEP to WPA3original ↗
1 Sept 2024
Understanding Authentication in Enterprise Wi-Fi (Part 1)original ↗
10 Aug 2024
802.11 Wi-Fi Explained: Control & Data Frames (Wireless Packets Part 2)original ↗
22 Jul 2024
802.11 Wi-Fi Explained: MAC Frame Structure (Wireless Packets Part 1)original ↗
13 Jul 2024
Understanding Protected Management Frames - Part 2original ↗
28 Jun 2024
Understanding Protected Management Framesoriginal ↗
23 Jun 2024
PMKIDHunter — Fast PMKID Capture Scriptoriginal ↗
10 Mar 2024

2020

Building a Compact XOR Encoder for Shellcode: A Step-by-Step Assembly Guideoriginal ↗
12 Nov 2020
Worldmail IMAP Exploit: Writing a Public SEH Buffer Overflow From Scratchoriginal ↗
9 May 2020
Abusing The Stackoriginal ↗
26 Apr 2020

2019

Corelan Advanced Exploit Development Review: Is It Worth It?original ↗
7 Dec 2019
nullsploit: A Custom Python Exploitation Framework Built From Scratchoriginal ↗
3 May 2019

2017

Penetration Testing in Social Housing: My Interview With Housing Technology Magazineoriginal ↗
28 Sept 2017

2016

Advisory: LDAPS Service Heap Memory Corruption Vulnerability - Symantec Encryption Management Server < 3.3.2 MP12original ↗
7 Jun 2016
Advisory: Local Privilege Escalation - Symantec Encryption Management Server < 3.3.2 MP12original ↗
7 Jun 2016
Advisory: OS Command Injection in Symantec Encryption Management Server < 3.3.2 MP12original ↗
7 Jun 2016

2014

ConScan v1.2: Username Disclosure and Brute-Force Added to Concrete5 Scanneroriginal ↗
7 Jun 2014
ConScan v1.2: Username Disclosure and Brute-Force Added to Concrete5 Scanneroriginal ↗
7 Jun 2014
Teaching Exploit Development at BSides London 2014: What I Learned From My First Workshoporiginal ↗
4 May 2014

2013

ConScan: A Black-Box Vulnerability Scanner for Concrete5 CMSoriginal ↗
26 Oct 2013
Security Advisory: Stored XSS in DEXs PM System WordPress Plugin v1.0.1original ↗
14 Oct 2013
SSL Private Key Password Cracker: A Tool Born From a Real Engagementoriginal ↗
31 Aug 2013
HTTP Enum: Automated HTTP Enumeration and Web Server Fingerprinting Tooloriginal ↗
15 Apr 2013

2012

Bypassing ASLR: Techniques for Exploit Developers Who've Hit the Walloriginal ↗
15 Apr 2012
TFTP Fuzzer: Finding Vulnerabilities in UDP-Based Protocols with Pythonoriginal ↗
25 Mar 2012
FTP Fuzzer: How I Found Real Bugs in FTP Servers with This Python Tooloriginal ↗
27 Jan 2012

2010

WiFi Episode 5: How to Uncover Hidden WiFi Networks and Crack WEPoriginal ↗
14 Nov 2010
WiFi Episode 4: WEP ARP Amplification — Cracking WEP Fasteroriginal ↗
29 Oct 2010
WiFi Episode 3: How to Bypass WEP Shared Key Authenticationoriginal ↗
19 Sept 2010
WiFi Episode 2: How to Crack WEP Encryption (Including Clientless Networks)original ↗
10 Sept 2010
WiFi Episode 1: How to Hack WPA and WPA2 Personal Networks (The Basics)original ↗
29 Aug 2010

Undated

Aboutoriginal ↗
—