[neuroelectron]

His public papers are mostly white hat focused so it would stand to reason that he has lots of black hat research that is not published.

[Ar-Curunir]

That's not how it works in academic computer security research. If a researcher has good attack papers, there are plenty of top venues that would accept them.

Please don't speculate from a position of ignorance.