John Carroll - The Contractor 🏴‍☠️🧯

Hollow Pentesting

OffSec

Confidently using AI in your penitents. Hollow Testing.

Synology DSM 7.3.2

Exploitation

Chaining three issues to gain root from a low privileged user.

HP Aruba Privileged Escalation Dec 2025

Exploitation

The HP Aruba VIA VPN client for Linux contains a local privilege escalation vulnerability that allows any unprivileged local user to gain root access. - CVE-2025-37186

Hacklore ...

Random

What Hacklore get's wrong. and the precursor to https://lolwifi.network

Ghosted.

Exploitation

Ghosted Domains coming to haunt you, one more check for your scanners, vendor assurance, OSINT, Supply chain, Appsec and all the rest of that good stuff.

Poll-Dancing & Age Verification

Privacy

Poll-Dancing & Age Verification - a critical view of yougov's obvious biased framing of the age verification shit-show

Juri.

sidemissions

what laws allow what government departments legal access to information on the end of an IP Address, it's called Juri. after Jurisdiction - https://juri.host/

Sunsetting Domains

InfoSec

What to do when you no longer need a domain

Amature.

Privacy

The wrong people in the room when the decisions where made to reduce citizen data security.

Threat Modeling ? Not My Cup of Tea...

InfoSec

Threat Modeling is not everyone's cup of tea, but let's threat model everyone's cup of tea.