# Paradoxis

> Dutch security researcher specializing in active directory, malware development and all things devops.

Every post is available as Markdown: append `.md` to its URL. The complete text of all posts is in llms-full.txt.

## Posts

- [Escalating All The Privileges With Foxit PDF Reader (CVE-2026–57239)](https://blog.paradoxis.nl/escalating-all-the-privileges-with-foxit-pdf-reader-cve-2026-57239-582a78b60492.md) (2026-07-15)
- [Playing Around With ADIDNS RPC Internals](https://blog.paradoxis.nl/playing-around-with-adidns-rpc-internals-0c59c15d0a15.md) (2026-07-03)
- [Decrypting MultiDesk Passwords](https://blog.paradoxis.nl/decrypting-multidesk-passwords-58af8ad274b3.md) (2026-02-17)
- [Applying Cluster Wide mTLS Certificactes in Kubernetes (Ingress Nginx)](https://blog.paradoxis.nl/applying-cluster-wide-mtls-certificactes-in-kubernetes-ingress-nginx-0daee4104b19.md) (2025-11-29)
- [Writing Sliver C2 Extensions in Rust](https://blog.paradoxis.nl/writing-sliver-c2-extensions-in-rust-a95f620266de.md) (2024-04-11)
- [YAFPC — Unauthenticated Remote Code Execution](https://blog.paradoxis.nl/yafpc-unauthenticated-remote-code-execution-755bf9e4d7c1.md) (2023-01-14)
- [StegCracker 2 Released](https://blog.paradoxis.nl/stegcracker-2-released-f03771ba855b.md) (2019-03-25)
- [Baking Flask cookies with your secrets](https://blog.paradoxis.nl/defeating-flasks-session-management-65706ba9d3ce.md) (2019-01-26)
- [SHA2017 — A recap of insanity](https://blog.paradoxis.nl/sha2017-a-recap-of-insanity-47aaf52c15a2.md) (2017-08-10)
- [Backdooring the PHP interpreter](https://blog.paradoxis.nl/your-interpreter-isnt-safe-anymore-the-php-module-rootkit-c7ca6a1a9af5.md) (2017-06-12)

## Optional

- [Full content](https://blog.paradoxis.nl/llms-full.txt): every post in one Markdown file
- [RSS feed](https://blog.paradoxis.nl/rss.xml)
- [Sitemap](https://blog.paradoxis.nl/sitemap.xml)