#security

all posts all tags

Github Actions - Supply Chain Attacks

Mar 26, 2025
#security

Discussion of the recent tj-actions/changed-files action compromise, and how we could prevent it.
Privilege Escalation in EC2, using Session Manager

Aug 30, 2024
#aws #security

The dangers of granting ssm:StartSession permissions to your EC2 instances
Static Password Protected Posts, pt. 2

Jul 9, 2024
#cryptography #security #meta

Some updates on my original post about encrypted content for this blog
Password Protecting Blog Posts WebCrypto!

May 12, 2024
#cryptography #security #meta #javascript

A process to password protect blog posts in my static site, using encryption to keep the contents secure.
Using Certificate Transparency Logs for DNS Enumeration

Oct 25, 2022
#infosec #security

A tool for enumerating DNS records using cert transparency and dictionary files
iPhone Backup Tools v2

Oct 24, 2022
#ios #reverse engineering #infosec #security #notes

Introducing a new version of my iOS backup tools, now featuring decryption. Written in rust.
Common Web App Security Bugs and where to find them

Jan 11, 2021
#security

A (non-exhaustive) list of common web security bugs with examples, including XSS and command injection.
Reverse Engineering some Wordpress Malware

Apr 12, 2020
#notes #php #reverse engineering #security

Wordpress Hardening & Reverse engineering some wordpress malware
Root Shell on your Drone!

May 31, 2018
#electronics #security #linux #reverse engineering

Syma X5SW - Getting a root shell, streaming video, taking pictures, and more!
iOS Backup Information Extractor Tool Updated

Dec 5, 2017
#ios #reverse engineering #infosec #security #notes

I've updated my tool to extract tons of useful data from iOS backups
Reverse Engineering the iOS Backup

Mar 17, 2017
#ios #reverse engineering #infosec #security #notes #javascript

Explore the format of iOS backups and ways to extract data.