NoSql Injection Cheatsheet
Learn how NoSQL Injection works, with example strings to inject to test for injections.
Null Sweep
Continuous Security, DevOps, and DevSecOps
Latest posts
Azure Security Architecture
In this article, I will walk through configuring and setting up all the Azure services needed to secure your account. There are many services available, but it can be difficult to understand what needs to be done to actually get protected and ensure that all assets are covered. This is
NoSQLi 0.5.1 Released
My NoSQL Injection tool now scans for additional types of PHP GET injections.
Security Bug Hunting with Proxies
How to find security bugs and privacy violations using attack proxies. An introduction.
NoSQLi - A Fast NoSQL Injection Scanner
NoSQLi is a CLI tool for testing NoSQL Databases, particularly MongoDB. It is very fast, simple to use, and easy to automate.
Kindle Collects a Surprisingly Large Amount of Data
Reading a book on a Kindle sends Amazon a lot of data about reading habits. How fast pages are turned, font sizes and views, and device details.
DEFCON 2020 Live Notes
Notes from various DEFCON talks, conversations, and Q&A sessions.
Secrets Management for Developers
Best practices for managing secrets when building and deploying applications.
Government Surveillance of Protestors
Modern anti-protester tactics include many things: cell phone monitoring, communications disruptions, social media blocking, social media monitoring...
Why is This Website Port Scanning me?
Investigation of the practice of port scanning site visitors for fingerprinting and tracking.
My Favorite InfoSec Learning Resources
A structured list of security learning resources.
Centralized Security Logging in AWS
CloudFormation templates and walk-through to setup detailed security logging in multiple AWS accounts, centralized into a security account.
A Better Way to SSH in AWS (With RDS tunneling and security automation)
Setup and use System and Session Manager to replace bastion hosts for SSH and RDS tunnels. Automate security tasks on servers with automation documents.
Advanced AWS Security Architecture
A series of articles implementing advanced security controls on AWS, leveraging build in aws security tooling and security best practices.
Subdomain_recon.py: A SubDomain Reconnaissance Tool
A tool to search for subdomain and nameserver takeover risks across an organization, written in python.