Shezmu Incident Response: A Journey to Duat
Incident Response · RecoveryLeading the live response to a protocol exploit, and returning millions of dollars to their rightful owner.
Notes on breaking and building
My long-form writing has shifted toward academic publications. The pieces below are an archive of earlier work on offensive security and tooling, served from the Wayback Machine. Some of it shows its age, but the core techniques hold up. Newer, less formal notes go on my blog.
01
Breaking
A Samba Horror Story: CVE-2021-44142
CVE-2021-44142 · SambaReverse-engineering and exploiting a critical Samba bug used at Pwn2Own.
Exploiting Magic Links: Critical Bugs One Line Away
Auth Bypass · RazerA critical authentication bypass in Razer's customer support portal.
ZombieVPN: Breaking That Internet Security
CVE-2020-12828 · VPNA critical bug in a VPN provider, exploited to earn CVE-2020-12828.
From 0 to 1337: Anatomy of a Provider Breach
Pentest · InfrastructureCritical findings from the penetration test of a country-scale service provider.
The Fall of Mighty Django: Unicode Case Transformations
CVE-2019-19844 · DjangoDiscovery, analysis, and PoC reproduction of CVE-2019-19844 in Django.
Malware Fights Back: The Tale of Agent Tesla
RCE · MalwareReverse-engineering the Agent Tesla malware and finding an RCE in its web panel.
Hunting for Bounties: The antihack.me Case Study
XSS · Bug BountyAn advanced XSS via SPF/DMARC records and a WAF bypass, found on a bug-bounty platform itself.
Hacking Smart Contracts: Paradigm CTF 2022 Flavor
Smart Contracts · CTFExploiting smart contracts through a selection of Paradigm CTF 2022 challenges.
Breaking Into Information Security: A Modern Guide
Career · GuideOne of my earliest posts, on getting into infosec as an offensive engineer.
02
Building
Building a personal automation pipeline: scraping, storage, reporting, and a small GUI.
A Real-World Sherlock Mind Palace: Introducing CrazyWall
OSINT · CrazyWallAn evidence-board tool to automate OSINT workflows; a genuinely underrated one.
Python 3.7 Asyncio for Hackers
Python · AsyncUsing asyncio to build a fast, efficient asynchronous web crawler.
Introducing CloudBrute: Wild Hunt on the Clouds
Cloud · CloudBruteBuilding a tool to find misconfigured cloud buckets across providers.
Let's Walk on the Chains: A Smart Contract Crawler
Web3 · CrawlerCrawling and extracting smart contracts at high speed.
Introducing Sec3Hub: A Blockchain Security Aggregator
Web3 · Sec3HubHow we built an aggregator for the on-chain security ecosystem.
A Web3 Hackathon Lead Dev's Diary: Into Khazad-dûm
Web3 · HackathonLeading a team to build a full-stack dApp for the Avalanche hackathon.
Threat Intelligence: Building Your Citadel
Threat IntelBuilding a threat-intelligence pipeline to automate the workflow end to end.