hacking
5 posts
Pivoting into VPC networks
Last week was the first public release of vpcvpnpivot , a tool that allows you to connect to private VPC subnets using an AWS Client VPN. I created this…
Internet-Scale analysis of AWS Cognito Security
Just published the whitepaper for my latest research: InternetScale analysis of AWS Cognito Security. The whitepaper contains the methodology and results of…
BlackHat Training
Will and I have teamed up to bring you the Web Application Hacker Levelup Lab at Black Hat USA 2019! This handson course is designed for hungry…
2019 Information Security Predictions
Cloud computing provider will suffer major breach And we’ll all reconsider running our most businesscritical applications and storing our unencrypted…
reCAPTCHA bypass via HTTP Parameter Pollution
tl;dr I reported a reCAPTCHA bypass to Google in late January. The bypass required the web application using reCAPTCHA to craft the request to…