don’t code me on that

Recap: Common Prompt Patterns

Tested with ChatGPT, Bard and Copilot

Cheatsheet: AWS Security Services

GuardDuty, Macie, Inspector, oh my!

Implement Boolean Blind SQL Injection with Binary Search

Sometimes while writing scripts to use sqli (SQL injection) to extract data, we have to deal with Boolean-based sqli. Usually this is done in a linear loop, but we can use binary search to speed it up.

Snippets: standalone py zip and base64 functions

Sometimes while writing pentest scripts, we need to write quick-and-dirty functions to attack certain vulns. Here are some of them.

Create zip files

Recap: REST Authentication and HTTP Signatures

A brief summary of the talk by David Blevins titled “Deconstructing REST Security by David Blevins”

Predicting masked ID with check-digit

Some identification numbers (IDs) come with check-digits, for example national IDs, membership IDs. In some cases, data protection regulation mandates masking parts of the ID during storage or when displayed. In most of these masked cases, the check-digit remains…

Recap: JWT and Cookies for Web Authn

A brief summary of the talk titled “JSON Web Tokens Suck — Randall Degges (DevNet Create 2018)”

A brief summary of the talk by Randall Degges titled “JSON Web Tokens Suck”