Miggo Engineering Insights

Technical content from the engineers building Miggo

July 23, 2026

"Patched" fastjson Still Has a Gadget-Free RCE: A Source-Level Walkthrough

A source-level analysis of the fastjson 1.2.68–1.2.83 @JSONType remote-class-load RCE — fires with autoType disabled, survives a type-bound parseObject(body, Dto.class), needs nothing on your classpath, and (via a /proc/self/fd trick) executes on JDK 8 through 25

Recent Insights

July 22, 2026

Structured Metrics in an Unstructured World: Using Binary Classification Metrics to Evaluate LLM-Based Features

Applying data science to measure LLM performance

June 23, 2026

Detecting CopyFail and DirtyFrag by thinking outside the box

This week at Miggo, I was tasked with detecting two recent Linux local privilege escalation vulnerabilities: CopyFail and DirtyFrag.

June 22, 2026

Detecting the nftables Catchall Use-After-Free (CVE-2026–23111) by thinking outside the box

The thesis there was simple: you don’t catch a kernel LPE by chasing the root shell at the end of it — you catch it by recognizing the one abnormal pattern the exploit cannot avoid producing, and you do it with high confidence and near-zero false positives.