Personal tech and security blog about things I like, use, dislike and misuse.

Main Navigation

CTF Walkthroughs

Walkthroughs and explanations on various vulnerable machines coming from VulnHub.

Suggestion? Question? Comment? Drop me a line via e-mail or Twitter!

IMDSv2 enforcement: coming to a region near you! 28 March 2024
Hiding in Plain Sight: Unlinking Malicious DLLs from the PEB 21 April 2023
A Tribute to Hadrien Milano 4 August 2022
MitM at the Edge: Abusing Cloudflare Workers 29 June 2022
Introducing Stratus Red Team, an Adversary Emulation Tool for the Cloud 28 January 2022
Implementing a Vulnerable AWS DevOps Environment as a CloudGoat Scenario 11 January 2022
Cloud Security Breaches and Vulnerabilities: 2021 in Review 22 December 2021
Phishing for AWS credentials via AWS SSO device code authentication 9 June 2021
Retrieving AWS security credentials from the AWS console 5 June 2021
Shifting Cloud Security Left — Scanning Infrastructure as Code for Security Issues (last updated August 2023) 20 December 2020