63 posts in this category · all categories
How can you securely share a secret number with someone, totally in public? Elliptic Curves
19 August 2026
Claude Code can consume, transmit, and compromise your .env files even if you tell it not to
19 April 2026
How to use YubiKey for authentication and sudo on Ubuntu 24.04
21 March 2026
How to securely create an encrypted digital 'in case of death' document
16 February 2025
What to do when your Tor relay isn't listening
13 February 2025
Going Dark: Running a Tor relay and a dark web version of this site
6 February 2025
We Are Terrible at Online Identity Management (or: Using Emails as An Identifier Was a Bad Move)
26 July 2023
Lastpass CLI can't login using master password
28 July 2022
My book, Password, is out now!
28 July 2016
Auto-renewing SSL Certificates with Let'sEncrypt
14 December 2015
How to block distributed brute-force attacks against Wordpress using fail2ban
23 August 2015
Wordpress php eval attacks
19 August 2015
Quibbling with the LRB over "Hackers"
3 September 2012
.NETIDS development restarted. Participants wanted.
19 November 2011
Encrypted Partition Recovery on Ubuntu 10.10
8 August 2011
Using Elliptical Curve Cryptography in OpenSSH
22 July 2011
SSL Enabled
27 January 2011
The 'net was never free from commercial interest; it's not a "new" threat to democratic speech
15 December 2010
Wireless when housesitting (airmon-ng)
16 November 2010
HTC Wildfire Stage 1 Soft-Root
15 August 2010
PoC Code for Facebook Friend Profile Gatherer
26 April 2010
sshsplit featured
11 March 2010
sshsplit: a dynamic tunnel multiplexer
2 March 2010
Dual Stage SQL Injection Attacks
27 January 2009
Fetching files via echo, FTP in a non interactive shell environment
7 December 2008
Bypassing firewalls using SSH Reverse Forwarding
7 December 2008
SSH Key Based, Password Less Login
7 December 2008
The importance of weaponization in exploit development
24 September 2008
Building a robust, SSL, CRC-Verified server/client solution in the .NET Framework with C#
23 July 2008
IE7 Remote File Access
5 March 2008
Firefox 3 disallows cross-site XBL
28 February 2008
An XML based XSS PoC platform
2 February 2008
Right-To-Left and Left-To-Right characters
27 November 2007
XSS for the common good - GreaseMousey
9 November 2007
Obfuscated fun
5 July 2007
Some evil stuff from sla.ckers
5 July 2007
JavaScript internal numerical representations
5 July 2007
HttpOnly cookies in .NET 2.0
26 June 2007
.NETIDS v.0.1.1.0 released
26 June 2007
CSRF being used in latest IPB vuln – what about PHP web request?
19 June 2007
.NETIDS v.0.1.0.0 released
19 June 2007
.NETIDS can now detect fragmented XSS
15 June 2007
Firefox nested comment fragmented XSS
13 June 2007
A bad day for browsers
5 June 2007
dotnetids
25 May 2007
(C)SRF one-time token bypass using AJAX and XSS
24 May 2007
XSS Tutorial
23 May 2007
String.fromCharCode Encoder
23 May 2007
Bypassing Same Origin Policy using Mash-Ups
21 May 2007
RSnake + Jeremiah Grossman's Book Released
20 May 2007
XSF: Cross Site Flashing
19 May 2007
MOSEB month of search engine bugs
16 May 2007
heise Security reports backdoor in Artmedic CMS
16 May 2007
XSS in eXceSS: A "learn-XSS tool"
16 May 2007
XSS Cheat Sheet
16 May 2007
PHP IDS
16 May 2007
JavaScript eval String.fromCharCode encoder
15 May 2007
Amendments to the British Computer Misuse Act
15 May 2007
Bypass ASP.NET XSS Protection in Internet Explorer
15 May 2007
httpOnly Cookie Detection
15 May 2007
Evaluating the security of the JSONRequest object
15 May 2007
JavaScript Referer Scripts XSS Injection
15 May 2007
Firefox XBL-JS Loader v1.0
15 May 2007