A tour of the AWS privilege escalation techniques modelled by PMapper and awspx, where each of them falls short, and how I rebuilt Snotra's shadow administrator detection to cover everything they do - and a good deal they do not.
How to upgrade your Avalon Nano 3s to the latest firmware
Finding more vulnerabilities in Bitcoin Miners
Understanding and Preventing Cross-Service Confused Deputy Vulnerabilities in AWS
How Entra ID App Registrations / Enterprise Applications are commonly misconfigured and can be used by attackers to elevate privileges, access sensitive information and move laterally across Azure tenancies.
Methods to memorise your seed phrase
Snotra now supports kubernetes!
Using CSRF Attack to update the Payout Address on BitAxe Bitcoin Miners
Checking Bitcoin Seed Phrases for transactions and balances
Simple method to define and build security testing containers in Podman