technical

All Posts

Why Using Encryption To Hide Resource Identifiers Could Be a Bad Idea

Apr 28, 2024 | Brad Dixon

Scanning SMB Shares Harder With smbls v2

Apr 24, 2024 | Austin Ralls

Man in the Middle: Viewing and Modifying Victim Traffic

Dec 19, 2023 | Dylan Ross

Contest + Wargame: Exploiting Misconfigured Sudo

Sep 30, 2023 | Austin Ralls

Decrypt TLS traffic With mitmproxy & Wireshark

Apr 06, 2023 | Brad Dixon

Shell Escapes

Mar 02, 2023 | Brad Dixon

XSS Through DHCP: How Attackers Use Standards

Oct 26, 2022 | Dylan Ross

Simplify Incident Response With CI/CD and Other Code Access Auditing

Aug 29, 2022 | Roman Faynberg

Credentialed Windows Remote Code Execution Techniques

Feb 17, 2022 | Ángel Suárez-Bárcena Martín

How We Use BloodHound, and How It Can Help Defenders: 3 Ways IT Analysts Could Use BloodHound To Improve Windows Domain Security

Jan 10, 2022 | Austin Ralls

Inbox (1): Proper Email Authentication

Nov 18, 2021 | Austin Ralls

Scanning SMB Shares With smbls

Nov 03, 2021 | Austin Ralls

The Feeling Is Mutual: Elegant & Effective Authentication

Sep 21, 2021 | Jeff Ake

Be Careful With Your Testing Account Passwords

Jul 30, 2021 | Austin Ralls

In Praise of LAPS

Jun 30, 2021 | Austin Ralls

Three Most Common Security Mistakes Seen During AWS Application Assessments

May 27, 2021 | Ángel Suárez-Bárcena Martín

Unintentionally Exposing Your Organization to MFA bypasses on Azure Active Directory

Apr 19, 2021 | Ángel Suárez-Bárcena Martín

Secrets in Broad Daylight, or How $500,000/Year Software Can Help Hackers Compromise Your Network

Apr 12, 2021 | Roman Faynberg

Backend DDoS Protection

Jan 27, 2021 | Austin Ralls

WASM Security Assessment Techniques

Aug 03, 2020 | Meador Inge

The 5 Most Common GraphQL Security Vulnerabilities

Apr 16, 2020 | Aidan Noll

Owning a Device With a Single Jump

Jan 13, 2020 | Danny Rosseau

Android Hard Coded Secrets

Aug 30, 2019 | Danny Rosseau

Command Injection With USB Peripherals

Aug 22, 2019 | Danny Rosseau

Reverse Engineering Go binaries Using Radare 2 and Python

Aug 21, 2019 | Jonathan Wrightsell

Abusing WebViews To Steal Files via Email

Aug 19, 2019 | Jesson Soto Ventura

Abusing WebViews To Steal Files via Email

Aug 19, 2019 | Jesson Soto Ventura

Cheating in eSports: How to Cheat at Virtual Cycling Using USB Hacks

Aug 09, 2019 | Brad Dixon

Web Cache Session Hijacking

Aug 07, 2019 | Meador Inge

Parsing Binaries With Kaitai Struct

Feb 01, 2019 | Ángel Suárez-Bárcena Martín

Writing a Simple ESP8266-Based Sniffer

Jul 26, 2018 | Ángel Suárez-Bárcena Martín

Implementing a Password Strength Indicator

Jun 22, 2018 | Jeremy Allen

JWT, OAuth, and Algorithm Choices

Feb 27, 2018 | Jeremy Allen

Meltdown and Spectre. Oh My!

Jan 05, 2018 | Meador Inge

Android 7 Cellular MiTM

Oct 24, 2017 | Brad Dixon

Proxying WBXML Services

Sep 20, 2017 | Brad Dixon

MitM Using Golang, Meet Timmy

Nov 08, 2016 | Jeremy Allen

Wear’s the MitM?

Oct 19, 2016 | Roman Faynberg

pin2pwn: How to Root an Embedded Linux Box With a Sewing Needle

Aug 06, 2016 | Brad Dixon

IoT Hacking: Peeking in IPSEC tunnels With Wireshark

Oct 30, 2015 | Brad Dixon

Patching BL/BLX instructions in ARM

Oct 15, 2015 | Jeremy Allen

Network Monitoring With nmap

Nov 04, 2013 | John Poch

Look Ma! Dotless Domain Names!

Aug 06, 2013 | Mike Zusman