The ramblings of a security researcher who likes tooling.
© All rights reserved.
I give talks and workshops in addition to my writings, perhaps more so. Everything below links out to YouTube; check out my channel where I will upload most of them.
22:28Join me as we go far off the beaten path in search of strange and exciting methods of script language detection.
21:48A full walkthrough of the Support box: LDAP credential extraction from a .NET binary, and a resource-based constrained delegation attack against Active Directory.
14:24A full walkthrough of the Shoppy box: NoSQL injection, credential reuse, and a Docker group privilege escalation.
▶ 8 videosWalkthroughs for challenges from San Diego CTF 2022, covering web, crypto, and reverse engineering. Beginner friendly.
▶ 6 videosWorkshops given while I was a founding director of my college cyber student organization.