01 Research journal
Technical write-ups, exploit development walkthroughs, and vulnerability research from TecSecurity.
4 published entries · Technical analysis & field notesSelected work
Long-form analysis from vulnerability discovery through exploit construction and coordinated disclosure.
A deep dive into CVE-2023-39475 and CVE-2023-39476 — two critical (CVSS 9.8) deserialization vulnerabilities in Inductive Automation's Ignition SCADA platform that allow unauthenticated remote code execution. We walk through the full …
Read the research
How we discovered and exploited CVE-2023-28760, a stack-based buffer overflow in the MiniDLNA service on the TP-Link Archer AX20 router, during preparation for Pwn2Own Toronto 2022.
Read the researchRecognition
Awards and acknowledgements earned through sustained vulnerability research and coordinated disclosure.
Rocco Calvi (@TecR0c) received the ZDI Vanguard Award for Most Prolific Researcher at Black Hat USA 2025, recognising 300+ remote code execution vulnerabilities reported through the Zero Day Initiative.
Read the field note
Rocco Calvi (@TecR0c) was recognised by the Microsoft Security Response Center as one of the top three Office security researchers for 2023, alongside Mat Powell (Trend Micro ZDI) and zcgonvh.
Read the field note