elttam
@elttam.bsky.social
elttam is a globally recognised, independent information security company, renowned for our advanced technical security assessments.
New blog post: ORM Leaking More Than You Joined For
www.elttam.com/blog/leaking...
This wraps up our blog post series on the ORM Leak vulnerability class, which also includes Semgrep rules.
www.elttam.com/blog/leaking...
This wraps up our blog post series on the ORM Leak vulnerability class, which also includes Semgrep rules.
ORM Leaking More Than You Joined For - elttamORM Leaking More Than You Joined For - elttam
elttam is a globally recognised, independent information security company, renowned for our advanced technical security assessments.
www.elttam.com
December 18, 2025 at 9:29 AM
New blog post: ORM Leaking More Than You Joined For
www.elttam.com/blog/leaking...
This wraps up our blog post series on the ORM Leak vulnerability class, which also includes Semgrep rules.
www.elttam.com/blog/leaking...
This wraps up our blog post series on the ORM Leak vulnerability class, which also includes Semgrep rules.
New blog post: Gotchas in Email Parsing - Lessons From Jakarta Mail, and includes @semgrep.com rules.
www.elttam.com/blog/jakarta...
www.elttam.com/blog/jakarta...
Gotchas in Email Parsing - Lessons From Jakarta Mail - elttamGotchas in Email Parsing - Lessons From Jakarta Mail - elttam
elttam is a globally recognised, independent information security company, renowned for our advanced technical security assessments.
www.elttam.com
November 19, 2025 at 1:08 AM
New blog post: Gotchas in Email Parsing - Lessons From Jakarta Mail, and includes @semgrep.com rules.
www.elttam.com/blog/jakarta...
www.elttam.com/blog/jakarta...
Alex / @ghostccamm.bsky.social from our team will be presenting at @blackhatevents.bsky.social EU this December on "ORMageddon: Leaking More Than You Joined For"
www.blackhat.com/eu-25/briefi...
www.blackhat.com/eu-25/briefi...
Black Hat
Black Hat
www.blackhat.com
October 28, 2025 at 2:17 AM
Alex / @ghostccamm.bsky.social from our team will be presenting at @blackhatevents.bsky.social EU this December on "ORMageddon: Leaking More Than You Joined For"
www.blackhat.com/eu-25/briefi...
www.blackhat.com/eu-25/briefi...
Talkback has had several new features pushed recently, including a new Inbox view for easily keeping up with recent news and publications and MITRE ATT&CK tracking for resources.
talkback.sh
talkback.sh
June 25, 2025 at 6:34 AM
Talkback has had several new features pushed recently, including a new Inbox view for easily keeping up with recent news and publications and MITRE ATT&CK tracking for resources.
talkback.sh
talkback.sh
New blog post: New Method to Leverage Unsafe Reflection and Deserialisation and gain RCE on Rails www.elttam.com/blog/rails-s...
New Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails - elttamNew Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails - elttam
elttam is a globally recognised, independent information security company, renowned for our advanced technical security assessments.
www.elttam.com
March 5, 2025 at 12:33 AM
New blog post: New Method to Leverage Unsafe Reflection and Deserialisation and gain RCE on Rails www.elttam.com/blog/rails-s...
Reposted by elttam
Boot security in the MCU, Daniel & Zoltan Madarassy - BSides Canberra 2024 youtu.be/LXdSVcvhJuI?... #BSidesCbr2024
Boot security in the MCU, Daniel & Zoltan Madarassy - BSides Canberra 2024
YouTube video by BSides Canberra
youtu.be
December 4, 2024 at 12:38 AM
Boot security in the MCU, Daniel & Zoltan Madarassy - BSides Canberra 2024 youtu.be/LXdSVcvhJuI?... #BSidesCbr2024