As a researcher for the Bishop Fox Threat Enablement & Analysis team, Jon spends his time hunting for vulnerabilities and writing exploits for software on our customers' attack surface. Jon has written and presented research on various topics including enterprise wireless network attacks, bypassing network access controls, and reverse-engineering edge security device firmware.
From Jon Williams
Blog / Industry
Cracking Firmware with Claude: Senior-Level Skill, Junior-Level Autonomy
Jul 08, 2026
Blog / Technical Research
A Crash, Not a Shell: SolarWinds Serv-U CVE-2026-28318
Jun 16, 2026
Blog / Technical Research
Popping Root on UniFi OS Server: Unauthenticated RCE Chain Detection & Analysis
Jun 05, 2026
Blog / Technical Research
Looting UniFi Controllers: Detecting and Weaponizing CVE-2026-22557
May 29, 2026
Blog / Technical Research
Detecting CVE-2026-0265 at Scale: PAN-OS CAS Authentication Bypass
May 22, 2026
Blog / Technical Research
strongSwan CVE-2026-25075: Integer Underflow in VPN Authentication
Mar 26, 2026
Blog / Technical Research
Arista NextGen Firewall XSS to RCE Chain
Dec 04, 2025
Blog / Technical Research
Fortinet FortiWeb Authentication Bypass – CVE-2025-64446
Nov 19, 2025
Blog / Technical Research
Vulnerability Discovery with LLM-Powered Patch Diffing
Aug 15, 2025
Resource / Guides
LLM-Assisted Vulnerability Research
Aug 15, 2025
Blog / Advisories
SonicWall Sonicos Versions 7.1.x and 8.0.x
Apr 24, 2025
Resource / Technical Briefings
Technical Briefing on SonicOS SSL VPN Denial-of-Service Vulnerability
Apr 21, 2025
Resource / Technical Briefings
Tearing Down (Sonic)Walls: Reverse-Engineering SonicOSX Firmware Encryption
Mar 21, 2025
Blog / Technical Research
SonicWall-CVE-2024-53704: Exploit Details
Mar 21, 2025
Resource / Technical Briefings
Tomcat CVE-2025-24813: What You Need to Know
Mar 18, 2025
Blog / Technical Research
Tomcat CVE-2025-24813: What You Need to Know
Mar 18, 2025
Blog / Technical Research
Tearing Down (Sonic)Walls: Decrypting SonicOSX Firmware
Feb 24, 2025
Resource / Technical Briefings
SonicWall-CVE2024-53704: Exploit Details
Feb 13, 2025
Blog / Technical Research
SonicWall CVE-2024-53704: SSL VPN Session Hijacking
Feb 10, 2025
Event
Bishop Fox at DistrictCon
February 21-22, 2022
Blog / Technical Research
It’s 2024 and Over 178,000 SonicWall Firewalls are Publicly Exploitable
Jan 15, 2024
Blog / Technical Research
Breaking Fortinet Firmware Encryption
Aug 02, 2023
Blog / Technical Research
Citrix ADC Gateway RCE: CVE-2023-3519 is Exploitable, and 53% of Servers Are Unpatched
Jul 21, 2023
Resource / Virtual Sessions
Breaking Down Q2's Critical CVEs: From Discovery to Exploitation
Jun 09, 2023
Blog / Technical Research
A More Complete Exploit for Fortinet CVE-2022-42475
May 17, 2023
Resource / Virtual Sessions
Achieving Warp Speed to Continuous Testing: How to Calculate ROI for your Business
May 10, 2022
Blog / Technical Research
Breaching the Trusted Perimeter | Automating Exploitation
Sep 12, 2019
