security
5 posts
BlackHat Training
Will and I have teamed up to bring you the Web Application Hacker Levelup Lab at Black Hat USA 2019! This handson course is designed for hungry…
2019 Information Security Predictions
Cloud computing provider will suffer major breach And we’ll all reconsider running our most businesscritical applications and storing our unencrypted…
Automated Security Analysis AWS Clouds
I’m hooked on cloud security, it has a little bit of everything: network security, application security, automation and DevOps . One of my latest cloud…
Threat modelling
As an external consultant that focuses on application penetration testingI’m not usually invited to application design, business logic discussions or threat…
reCAPTCHA bypass via HTTP Parameter Pollution
tl;dr I reported a reCAPTCHA bypass to Google in late January. The bypass required the web application using reCAPTCHA to craft the request to…