CVE-2026-64300 RedHat Enterprise PoC
Developed a reliable LPE PoC for CVE-2026-64300 on a RedHat Enterprise Linux system and responsibly disclosed the source to RedHat.
Projects
Fence2Pwn
★Presented “Fence2Pwn: KFENCE-Enabled Kernel Exploitation Bypassing Slab Hardening and Memory Tagging” at USENIX Security 2026.
Apple macOS CVE-2026-43754
An app may be able to leak sensitive kernel state.
Android VRP: Moderate & High-Quality Report
Android Security Team acknowledged my Google VRP submission as Moderate and High-Quality.
Disclosure: embargoed
OpenAI Codex Hackathon
★Participated in the OpenAI Codex Hackathon in Vienna with Team LosFuzzys.
Placed 3rd, winning 5000$ in OpenAI API credits and x4 ChatGPT Pro 1Y Subscriptions.
Insomni'hack' CTF 2026
Played the onsite CTF on Lausanne (Switzerland). Scored top 3 out of ~130 teams.
Flight Price History
Providing 3+ years of historic Ryanair flight prices through a public interface.
Reworked the scraping project to a usable website.
WPCTF 2025
Participated in WPCTF 2025 with LosFuzzys, an on-site CTF in Italy, organized by Würth IT Italy s.r.l.
Placed 2nd, winning a prize of 2500€.
GlacierCTF 2025 (Organizing)
Organized GlacierCTF 2025, the international security competition from LosFuzzys.
Held arround 1.500-2.000 participants with more than 15.000€ in prizes. Sponsored by Google, Hex-Rays and ISEC (Graz University of Technology).
Developed four challenges: “Flip Flip Hooray!” (kernel pwn), “Typst Lotto” (misc), “typstmk” (misc), and “gitresethard” (easy misc).
The event obtained a future weight of 73.17 via public vote, placing the event in the ~90th percentile of CTFs in CTFTime.
saarCTF 2025
Participated in saarCTF 2025 with team LosFuzzys and placed 9th out of 127 teams.
Introduction to CTFs
Held an introductory session about Capture the Flag (CTF) competitions.
Lecturer at Secure Software Development
Lecturer at the Secure Software Development (binary exploitation) course from ISEC TUGraz. Doing the “Memory Corruption” part of the lectures. Also working on the practicals, infrastructure, and exams.
ISEC Slides Typst Template
Ported the ISEC slides template from LaTeX to an opinionated Typst template. Pushed it to Typst universe.
Graz Security Week 2025
Attended the Graz Security Week 2025 summer school and organized the CTF Labs (workshop).
Linux Security Summit Europe 2025
Attended the Linux Security Summit Europe 2025 conference, organized by The Linux Foundation and located in Amsterdam.
DEFCON 33 CTF Finals
★Participated in the DEFCON 33 CTF Finals in Las Vegas with the team KuK Hofhackerei.
Started PhD
Started my PhD (01/08/2025) at the Institute of Information Security (ISEC, former IAIK) in the Secure Systems group and under the supervision of Stefan Mangard.
LosTemplates
Collaboratively developed LosTemplates: preconfigured challenge baselines for CTFs. Supports instanced web, instanced qemu+ssh, jails, sagemath, etc. All done with coreutils, containers, shells and makefiles. Handles most of the tedious CTF infrastructure tasks.
Master's Defense
Defended my Master’s Thesis and finished the degree. Contents are under embargo, will be published after.
GoogleCTF 2025
Played GoogleCTF2025 (only a bit) and solved “bpfbox” along a teammate.
CTFTime Scripting
Created some small CTFTime wrapper scripts to list CTFs via the CLI and calculate rating points.
DEFCON CTF Qualifier 2025
Played with KuK Hofhackerei and got 6th place, qualifying for DEFCON CTF 2025.
Siemens OT Workshop
Attended an OT Workshop organized by Siemens. Topics: Profinet, OT Pentesting, TIA Portal
Insomnihack 2025
Played with LosFuzzys and placed 2nd on the academic bracket.
Attended the conferences.
CTF Team Captain
Elected team captain of the CTF Team LosFuzzys
OpenWRT Updater Script
Created a script to upgrade OpenWRT routers via cron
Fedora Copr Packages
Packaging
typst, tinymist and lf in Fedora Copr.ISEC Master Thesis Typst Template
Created a Master’s Thesis typst template for ISEC TUGraz.
GlacierCTF2024 (Organizing)
Collaborated on GlacierCTF2024 developing challenges, templates, infrastructure and organization.
Provided typstastic, Schrödinger Compiler and ksmaze
Secure Software Development Tutor
Developed
pwn (exploiting) challenges for Secure Software Development KU courseSecurity Week CTF Organizer
Co-organized the Graz Security Week 2024 CTF Lab
Attended the conferences.
flights.ecomaikgolf.com
Public historic flight price data scraping for educational purposes
Linux Security Summit 2024
Attended the Linux Security Summit 2024 (Europe) conference.
MSc Thesis Midterm Presentation
Presentation about the ongoing Master’s Thesis work for IAIK.
Slides: TODO NDA
Linux Kernel Related Work
Two-month internship doing work related to the Linux Kernel @ IAIK Secure Systems Group.
Insomnihack 2024
Played with LosFuzzys and placed 3rd on the academic bracket.
Attended the conferences.
Funds Scraper
Private scraper of ~2000 European mutual funds data from Morningstar
Reworked Website
Migrated this website to Hugo & developed a custom template for it
Linux Kernel Samepage Merging
Ongoing project with Linux’s KSM
GlacierCTF2023 (Organizing)
Collaborated on GlacierCTF2023. Involved in developing a challenge (Glacier Military Daemon and worked on deployments (Kubernetes, Terraform, GCloud)
CTF Setup & Tooling
Quick presentation of CTF Tooling with Distrobox
Hybrid Homomorphic Encryption + MPC
Two-month internship at IAIK working in a HHE+MPC project in C++
Secure Boot Overview
University seminar presentation about Secure Boot (quick overview from the simplest prespective).
Pseudo Random Number Generator Presentation
University seminar presentation about PRNGs
Ryanair Flight Scraper v2
Improved Ryanair flight scrapper with Scrapy (Python) and a Laravel Web Interface + Deployment
Unpublished/Private
Distrobox Presentation
How to build a CTF enviroment with Distrobox and Podman
Ryannair Flight Scraper
Ryannair flight scrapper (Python) and ImGUI interface (Python)
Unpublished. Deprecated for v2
alma kernel
★alma is a toy kernel written in C++ for x86_64 machines with the mere purpose of learning OS development