2024

DLL Hijacking in MobilePASS version 8.4.4.99
Server-Side Request Forgery in HikCentral Professional <= V2.5.1
Rusty Beginnings: Error Handling in Rust

2023

Hacking the Success Code: 6 Habits Every Penetration Tester Must Have
Supercharge Your Integration Tests with the Power of Docker
Learn AI or Get Left Behind
Deploying Django with Github Actions and Docker

2022

Should you take a black box approach or a white box approach in penetration testing?
Measuring attack paths in web applications
My thoughts on Secure Code Review
Python gems to look out for
Unauthenticated LFI in Appwrite 0.5.0 <= 0.12.1

2021

Overwriting HttpOnly cookies with Javascript

2020

Technical Analysis Of The Necr0 Python Malware
SLAE 7: Creating your own crypter using golang
SLAE 6: Creating polymorphic shellcode
SLAE 5: Analyzing shellcode generated by msfvenom
SLAE 4: Custom encoder for bypassing signature based detection
SLAE 3: Egg hunting in Linux x86 Assembly
SLAE 2: Creating a reverse TCP shell in x86 Assembly
SLAE 1: Creating a bind shell in x86 Assembly

2019

Hack The Box - Olympus Writeup
Security Recommendations For Implementing BankID
My OSCP Review

2017

SEC-T CTF - G1bs0n Writeup
UIUCTF - Are we out of the woods yet? Reversing 350p
VolgaCTF - Share Point writeup
VolgaCTF - Bloody Feedback writeup
Chalmers CTF

2016

SEC-T CTF - Confusion Writeup
Exploiting weak Content Security Policy (CSP) rules for fun and profit
Creating SYN flood attacks with Python
Monitoring your server with Monit
Securityfest CTF - Defacer Challenge Writeup
Securityfest CTF - Coresec challenge writeup
Using Amazon S3 for your static site? One thing to keep in mind

2015

Basics of netstat
LogRhythm's Blackhat challenge - Write up
Alien: Isolation
Digital Steganography
Dashing Dashboard
No Such Agency