Posts

2026-07-07 Coaching Singapore's HTX teams to top-5 finishes at DEF CON 32 ★ What it actually means to coach a CTF team: coordination, challenge triage, and knowing when to sit down and grind the hard ones together.
2022-11-16 Deception concepts: the elements of deception Deception is not just for attackers. Four abstractions (NEDI, NEFI, EEDI, EEFI) to structure defensive deception planning.
2020-05-07 Security misconceptions A SANS@MIC talk on the pits and fallacies we fall into while advising ourselves and others in information security.
2017-10-09 Smart house attack vectors Beyond WPA2 and a firewall: WPS, pre-compromised LAN hosts, evil-maid USB attacks, weak ISP routers, leaked credentials, and sub-GHz radio protocols.
2017-10-04 Case study: breaking into the smartest smart house A live hack of Norway's smartest home for NRK: from the parking lot onto the LAN, through a HomeSeer zero-day, and up to the production controller.
2016-08-27 Cipher and password bruteforcing with OpenSSL A small shell loop to bruteforce unknown OpenSSL cipher and password combinations, plus using Hashcat rules to build the wordlist.
2016-08-19 An Azure zero-day XSS with sandbox escape Chaining a command injection into a stored XSS that jumps from a compromised SaaS site to the Azure administrator through the Kudu console.
2015-09-03 Fifteen tips on producing good documentation Practical rules for documentation that actually gets written and stays useful: keep it simple, write in English, never store passwords, and update as you go.
2014-12-04 Finding zero-day XSS through document metadata Embedding XSS payloads in EXIF and document metadata, and using the technique to find zero-days in image-sharing sites and WordPress.
2013-05-04 My reflections as a CISO Moving from techie to security leader: staying visible, not being the dust boy, and avoiding the security roller-coaster of budget cuts.
2012-12-23 Is social engineering an actual threat? Why social engineering keeps working, the psychological levers behind it, and classic examples including the HBGary hack.
2012-10-06 XSS explained The three ways to deliver a Cross-Site Scripting payload, the attack vectors that make it dangerous, and a short history of XSS in the wild.
2012-05-12 One word for the most important security solution Scraping a LinkedIn word game where infosec professionals named the single most important thing in security, and visualizing the answers.
2012-05-11 Enumeration with sqlmap Using sqlmap to enumerate databases through a SQL injection, what enumeration means in a pen test, and how the attack looks in the server logs.