Offensive security, incident response, and attack surface management.https://chrisdale.no/https://chrisdale.no/posts/coaching-htx-at-def-con-32/https://chrisdale.no/posts/coaching-htx-at-def-con-32/What it actually means to coach a CTF team: coordination, challenge triage, and knowing when to sit down and grind the hard ones together.Tue, 07 Jul 2026 00:00:00 GMThttps://chrisdale.no/posts/deception-concepts-elements-of-deception/https://chrisdale.no/posts/deception-concepts-elements-of-deception/Deception is not just for attackers. Four abstractions (NEDI, NEFI, EEDI, EEFI) to structure defensive deception planning.Wed, 16 Nov 2022 00:00:00 GMThttps://chrisdale.no/posts/security-misconceptions-2020/https://chrisdale.no/posts/security-misconceptions-2020/A SANS@MIC talk on the pits and fallacies we fall into while advising ourselves and others in information security.Thu, 07 May 2020 00:00:00 GMThttps://chrisdale.no/posts/smart-house-attack-vectors/https://chrisdale.no/posts/smart-house-attack-vectors/Beyond WPA2 and a firewall: WPS, pre-compromised LAN hosts, evil-maid USB attacks, weak ISP routers, leaked credentials, and sub-GHz radio protocols.Mon, 09 Oct 2017 00:00:00 GMThttps://chrisdale.no/posts/breaking-into-the-smartest-smart-house/https://chrisdale.no/posts/breaking-into-the-smartest-smart-house/A live hack of Norway's smartest home for NRK: from the parking lot onto the LAN, through a HomeSeer zero-day, and up to the production controller.Wed, 04 Oct 2017 00:00:00 GMThttps://chrisdale.no/posts/cipher-and-password-bruteforcing-with-openssl/https://chrisdale.no/posts/cipher-and-password-bruteforcing-with-openssl/A small shell loop to bruteforce unknown OpenSSL cipher and password combinations, plus using Hashcat rules to build the wordlist.Sat, 27 Aug 2016 00:00:00 GMThttps://chrisdale.no/posts/azure-zero-day-xss-with-sandbox-escape/https://chrisdale.no/posts/azure-zero-day-xss-with-sandbox-escape/Chaining a command injection into a stored XSS that jumps from a compromised SaaS site to the Azure administrator through the Kudu console.Fri, 19 Aug 2016 00:00:00 GMThttps://chrisdale.no/posts/fifteen-tips-on-producing-good-documentation/https://chrisdale.no/posts/fifteen-tips-on-producing-good-documentation/Practical rules for documentation that actually gets written and stays useful: keep it simple, write in English, never store passwords, and update as you go.Thu, 03 Sep 2015 00:00:00 GMThttps://chrisdale.no/posts/finding-zero-day-xss-via-document-metadata/https://chrisdale.no/posts/finding-zero-day-xss-via-document-metadata/Embedding XSS payloads in EXIF and document metadata, and using the technique to find zero-days in image-sharing sites and WordPress.Thu, 04 Dec 2014 00:00:00 GMThttps://chrisdale.no/posts/my-reflections-as-a-ciso/https://chrisdale.no/posts/my-reflections-as-a-ciso/Moving from techie to security leader: staying visible, not being the dust boy, and avoiding the security roller-coaster of budget cuts.Sat, 04 May 2013 00:00:00 GMThttps://chrisdale.no/posts/is-social-engineering-an-actual-threat/https://chrisdale.no/posts/is-social-engineering-an-actual-threat/Why social engineering keeps working, the psychological levers behind it, and classic examples including the HBGary hack.Sun, 23 Dec 2012 00:00:00 GMThttps://chrisdale.no/posts/xss-explained/https://chrisdale.no/posts/xss-explained/The three ways to deliver a Cross-Site Scripting payload, the attack vectors that make it dangerous, and a short history of XSS in the wild.Sat, 06 Oct 2012 00:00:00 GMThttps://chrisdale.no/posts/the-most-important-information-security-solution/https://chrisdale.no/posts/the-most-important-information-security-solution/Scraping a LinkedIn word game where infosec professionals named the single most important thing in security, and visualizing the answers.Sat, 12 May 2012 00:00:00 GMThttps://chrisdale.no/posts/enumeration-with-sqlmap/https://chrisdale.no/posts/enumeration-with-sqlmap/Using sqlmap to enumerate databases through a SQL injection, what enumeration means in a pen test, and how the attack looks in the server logs.Fri, 11 May 2012 00:00:00 GMT