/terms Legal
Terms of service
Last updated: 17 September 2026
The research, the writeups and the proof-of-concept code on this site are published for the people who have to defend the systems they describe. Each proof of concept goes out after the vendor fix is available.
Running any of it against a system you do not own, or have no written permission to test, is a criminal offence in most jurisdictions.
01 What this is
A personal research site. It publishes vulnerability research on network security appliances, the writeups behind it, and the proof-of-concept code, all of it reported to the vendor first.
Using the site means you accept these terms. If you do not accept them, do not use it.
02 What you may do
Read it, link to it, and quote it with attribution. Run the code against systems you own, or that you have written permission to test.
Republishing the writeups or the exploit code as your own, or using either commercially, needs my permission first.
03 What you may not do
Nothing here is a licence to:
- reach a system you have no authorisation to touch, or keep access you were never given;
- cause damage, disruption or data loss to anyone’s systems;
- package the code into malware, or into anything else built to do harm.
Getting authorisation, and being able to show it, is your responsibility. The material being public does not make any of the above lawful.
04 Disclosure
Everything published here went to the vendor first, and nothing goes out before a fix is available. Most of it carries a CVE identifier. A few findings are published under a vendor advisory while the identifier is still pending, and the CVE page lists those separately.
05 No warranty
All content is provided "AS IS", without warranty of any kind, express or implied. I make no guarantee about the accuracy or completeness of anything written here, and none about what the code does on a device that is not the one I tested. Use it at your own risk.
06 Liability
I am not liable for damages arising from the use or the misuse of anything on this site, including but not limited to direct, indirect, incidental, punitive and consequential damages. You are responsible for what you run and for where you run it.
07 Intellectual property
The writeups, the research and the exploit code are mine unless a page says otherwise. A quote or a reference needs attribution and nothing more. Anything beyond that needs permission.
08 Links out
Pages here link to NVD, to vendor advisories and to code hosted elsewhere. What those sites contain, and whether they stay up, is not something I control.
09 Changes
If these terms change, the date at the top of this page changes with them.
10 Contact
Questions about these terms, or a report that something here is being misused, go to the contact page.