The Contractor 🏴‍☠️🧯 (Page 2)

BugCrowd & Researcher Philosophy Thoughts

Organisations Should never use in-house triage, Hunters and researchers should only use them as a payment platform. that's it on a napkin.

Synology DSM 7.3.2

Chaining three issues to gain root from a low privileged user.

HP Aruba Privileged Escalation Dec 2025

The HP Aruba VIA VPN client for Linux contains a local privilege escalation vulnerability that allows any unprivileged local user to gain root access. - CVE-2025-37186

Hacklore ...

What Hacklore get's wrong. and the precursor to https://lolwifi.network

Ghosted.

Ghosted Domains coming to haunt you, one more check for your scanners, vendor assurance, OSINT, Supply chain, Appsec and all the rest of that good stuff.

Poll-Dancing & Age Verification

Poll-Dancing & Age Verification - a critical view of yougov's obvious biased framing of the age verification shit-show

Juri.

what laws allow what government departments legal access to information on the end of an IP Address, it's called Juri. after Jurisdiction - https://juri.host/

Sunsetting Domains

What to do when you no longer need a domain

Amature.

The wrong people in the room when the decisions where made to reduce citizen data security.

Threat Modeling ? Not My Cup of Tea...

Threat Modeling is not everyone's cup of tea, but let's threat model everyone's cup of tea.

The BYOD Post.

EntSec

BYOD Problem, options.

Files, Folders & Fun (revisited)

Exploitation

Playing with folder resolution to build a better pretext

The Cost of Expiration

EntSec

Who needs to know when a domain has expired ? It Depends, and it Deepens.

File Folding.

Ideas

File Folding is a technique that moves a file into hex, and that hex is broken into folder file names in a fashion that can be reconstructed.

Untrusted Wi-Fi Networks, Advice for All.

Random

Nine words unpacked.

Data-bouncing

OffSec

Data-Bouncing - The art of indirect exfiltration. Using & Abusing Trusted Domains as a 2nd Order Transport.

Securing Ghost Blog Authentication with Cloudflare's ZeroTrust Access Policy

Random

How to implement MFA in Ghost Blog with Cloudflare's Zerotrust Access Policy.

Three-Word Password Attacks

OffSec

The idea behind three word passwords as a concept is in my opinion a nice nudge in the right direction, In a perfect world, a passphase or a sentence

Get TI from historical breach data?

OSINT

We can do more with breach data.

Identity Inheritance via expired domains

Exploitation

I wonder if any of these leaked email address domains are expired, and I wonder if I can buy them and inherit the identities associated with them via password resets

Posts