I co-authored a blog post with Mehdi Talbi about an Exim vulnerability exploitation. Blog post is available at https://www.synacktiv.com/posts/exploit/scraps-of-notes-on-exploiting-exim-vulnerabilities.html.

Mehdi Talbi and I have presented our work on leveraging row-hammering to attack a co-hosted virtual machine at Infiltrate 2018.

Mehdi Talbi and I have published a case study of VM escape on Phrack. The full paper is available at http://phrack.org/papers/vm-escape-qemu-case-study.html.

Haka is an open source security oriented language which allows to apply security policies on (live) captured traffic. The important here, is that with Haka you can easily alter live traffic.