Security research — vulnerability writeups, CVEs, tools, and talks.https://tomnoblejordan.com/https://tomnoblejordan.com/posts/bounds-check-wrong-field/https://tomnoblejordan.com/posts/bounds-check-wrong-field/How wp2shell chains a plugin upload bypass with a crafted PHP payload to get interactive shell access on misconfigured WordPress instances.Mon, 20 Jul 2026 00:00:00 GMThttps://tomnoblejordan.com/posts/iokit-race/https://tomnoblejordan.com/posts/iokit-race/Understanding offensive techniques from the developer's perspective — process injection, API hooking, and evasion methods studied for better detection engineering.Wed, 10 Jun 2026 00:00:00 GMThttps://tomnoblejordan.com/posts/signed-helper-nobody-audits/https://tomnoblejordan.com/posts/signed-helper-nobody-audits/ISeeU uses Channel State Information from standard WiFi hardware to detect movement through walls — post-exploitation surveillance without cameras.Wed, 15 Apr 2026 00:00:00 GMThttps://tomnoblejordan.com/posts/pool-grooming-helper/https://tomnoblejordan.com/posts/pool-grooming-helper/SSHoney captures attacker credentials, commands, and session behavior in a lightweight C implementation — what I learned from watching real intrusion attempts.Fri, 20 Feb 2026 00:00:00 GMT