https://davidrochester.com/Recent content on davidrochesterHugoen-usWed, 20 May 2026 00:00:00 -0600https://davidrochester.com/posts/container-escape-via-inference/Wed, 20 May 2026 00:00:00 -0600https://davidrochester.com/posts/container-escape-via-inference/Two container-to-host RCE vulnerabilities in Docker. vllm-metal hardcoded trust_remote_code=True, letting a malicious model execute arbitrary Python on the host. When Docker quietly patched it, we found mlx-lm doing the same thing through an importlib path with no gate at all.https://davidrochester.com/posts/cve-2026-7020/Sat, 25 Apr 2026 00:00:00 -0600https://davidrochester.com/posts/cve-2026-7020/Arbitrary file read in Ollama via tensor digest path traversal. A malicious OCI registry can trick Ollama into exfiltrating any file on the host — including SSH private keys — in three unauthenticated API calls.https://davidrochester.com/posts/cve-2026-5530/Thu, 09 Apr 2026 00:00:00 -0600https://davidrochester.com/posts/cve-2026-5530/SSRF in Ollama&rsquo;s OCI registry redirect handling. A malicious registry can redirect blob downloads to internal endpoints, bypass hash verification, and exfiltrate full responses via the push API.https://davidrochester.com/posts/cve-2026-33990/Sun, 29 Mar 2026 23:19:00 -0600https://davidrochester.com/posts/cve-2026-33990/SSRF in Docker Model Runner&rsquo;s OCI authentication flow. A malicious registry can redirect the token exchange to scan internal networks and exfiltrate tokens during a model pull.https://davidrochester.com/posts/cve-2026-0842/Fri, 09 Jan 2026 23:19:00 -0600https://davidrochester.com/posts/cve-2026-0842/Missing authentication in the smART Sketcher 2.0 allows anyone within Bluetooth range to send arbitrary images to a child&rsquo;s toy without any pairing or authorization.https://davidrochester.com/posts/htb-season-9-signed/Tue, 14 Oct 2025 23:32:00 -0400https://davidrochester.com/posts/htb-season-9-signed/HTB Season 9. Signed is a Medium Windows Active Directory box involving MSSQL enumeration, Silver Ticket forging, and NTLM reflection via CVE-2025-33073.https://davidrochester.com/posts/cmu-binary-bomb-phase-6/Mon, 19 Aug 2024 23:27:00 -0400https://davidrochester.com/posts/cmu-binary-bomb-phase-6/Phase 6 of the CMU Binary Bomb. Reversing a linked list sorting algorithm to find the correct node ordering and defuse the final bomb.https://davidrochester.com/posts/cmu-binary-bomb-phase-5/Sat, 17 Aug 2024 23:27:00 -0400https://davidrochester.com/posts/cmu-binary-bomb-phase-5/Phase 5 of the CMU Binary Bomb. Mapping an array lookup chain to find the input that iterates exactly 15 times and lands on 0xF.https://davidrochester.com/posts/cmu-binary-bomb-phase-4/Fri, 16 Aug 2024 23:27:00 -0400https://davidrochester.com/posts/cmu-binary-bomb-phase-4/Phase 4 of the CMU Binary Bomb. Using Ghidra to decompile a recursive function and trace the call tree to find the correct input.https://davidrochester.com/posts/cmu-binary-bomb-phase-3/Fri, 16 Aug 2024 15:16:00 -0400https://davidrochester.com/posts/cmu-binary-bomb-phase-3/Phase 3 of the CMU Binary Bomb. Tracing sscanf format strings and conditional jumps to find the correct two-number input.https://davidrochester.com/posts/cmu-binary-bomb-phase-2/Fri, 16 Aug 2024 07:59:00 -0400https://davidrochester.com/posts/cmu-binary-bomb-phase-2/Phase 2 of the CMU Binary Bomb. Reverse engineering a doubling algorithm that expects the sequence 1 2 4 8 16 32.https://davidrochester.com/posts/cmu-binary-bomb-phase-1/Thu, 15 Aug 2024 23:19:00 -0600https://davidrochester.com/posts/cmu-binary-bomb-phase-1/Phase 1 of the CMU Binary Bomb. Using WinDbg to find a plaintext string comparison and defuse the first phase.https://davidrochester.com/posts/cmu-binary-bomb-introduction/Thu, 15 Aug 2024 23:19:00 -0400https://davidrochester.com/posts/cmu-binary-bomb-introduction/Introduction to the CMU Binary Bomb reverse engineering challenge. Background on the lab, tools used, and what to expect across all 6 phases.https://davidrochester.com/posts/want-to-overflow-buffers/Fri, 09 Aug 2024 23:32:00 -0400https://davidrochester.com/posts/want-to-overflow-buffers/Walkthrough of the &lsquo;bof&rsquo; challenge from pwnable.kr. Analyzing the stack layout in Ghidra and crafting a buffer overflow payload to overwrite a function parameter.https://davidrochester.com/posts/introducing-myself-and-file-descriptors/Sun, 04 Aug 2024 14:00:00 -0400https://davidrochester.com/posts/introducing-myself-and-file-descriptors/Walkthrough of the &lsquo;fd&rsquo; challenge from pwnable.kr. Exploiting file descriptors to redirect stdin and grab the flag.https://davidrochester.com/about/Mon, 01 Jan 0001 00:00:00 +0000https://davidrochester.com/about/<p>I&rsquo;m David Rochester, a Software and Security Engineer, as well as an independent security researcher focusing on AI, cloud, and software security. I studied computer science in undergrad and found a passion for cybersecurity, specifically offensive cybersecurity. I&rsquo;m currently pursuing my master&rsquo;s in computer science with a focus on AI at the University of Texas at Austin. I have some security certifications and a few CVEs, most notably in Docker and Ollama. I enjoy writing code and hacking things, whether it&rsquo;s new toys my kids get, new technology my wife brings home, or anything else I find interesting. I occasionally participate in CTFs, but recently my efforts have been focused on researching OSS for novel vulnerabilities and on AI security research.</p>https://davidrochester.com/series/binary-bomb/Mon, 01 Jan 0001 00:00:00 +0000https://davidrochester.com/series/binary-bomb/Start with the introduction, then work through all six Binary Bomb phases in order.