Categories
Category
Misc.
- long time no blog Dec 08, 2007
- Back and RoraScanner Jul 28, 2007
- Away for a bit Jul 13, 2007
- Moved Again.. Jun 23, 2007
- back.. in more than one sense of the word May 18, 2007
- Some cool new tech things I've been playing with May 03, 2007
- One of those Articles... Mar 05, 2007
- The wonders of modern (open source) technology... Dec 07, 2006
- Cool netstat and wmic stuff Dec 06, 2006
- The cats alluded to in by blog title Dec 03, 2006
- Using Google Code search to find the programming language most likely to drive you mad Oct 15, 2006
- Cool list of YouTube stuff Oct 13, 2006
- Google Cheatsheet. Sep 28, 2006
- Great Dictionary Site Aug 23, 2006
- Cool Interviews with great programmers Jul 24, 2006
- Vast quantities of Coolness from VMware Jul 13, 2006
- List of data breaches Jul 07, 2006
- Survey results on security.. spend more.. get less Jun 13, 2006
- Insider Attack Court case Jun 08, 2006
- Lsit of Cool sites related to Google Maps Feb 27, 2006
- Blog Worm.... Jan 26, 2006
- Good Guide for Home user Internet Security Jan 19, 2006
- Choosing a Wiki Jan 10, 2006
- Something to do, 'cause all the cool kids are. Jan 09, 2006
- search for a music player... over? Nov 17, 2005
- Interesting Survey results... Oct 30, 2005
- More blogs to keep a track of Oct 11, 2005
- Coverage of the "Tsunami Hacker" Oct 10, 2005
- Just a touch scary... Oct 05, 2005
- Link to a very interesting writeup on international hacking Sep 08, 2005
- Anonymity on the 'net Sep 08, 2005
- Template Worm announcement Sep 01, 2005
- Loong break from blogging and announcing www.isobelellis.com Aug 31, 2005
- Interesting Story about DDoS attacks Jul 26, 2005
- Thought provoking post on terrorism and statistics Jul 24, 2005
- Declining E-commerce? Jun 24, 2005
- A big breach of security Jun 18, 2005
- [OT] Geek T-shirts... Jun 12, 2005
- Real Interesting Post: Microsoft in trouble? Apr 18, 2005
- Gmail File System Apr 10, 2005
- publicly available FTP web interface Mar 30, 2005
- Unintended consequences Mar 14, 2005
- I'm back! from a looooong break Mar 13, 2005
- [OT]Firefox Tuning Info Jan 04, 2005
- [OT] Amarok Rules.... Dec 19, 2004
- Comment Spamming and Typekey Nov 21, 2004
- And now I'm back.... Oct 20, 2004
- Interruptions to blogging..... Jul 11, 2004
- Slashdot story on Cool DNS tricks... Jun 22, 2004
- cool.. bootable USB drives Mar 27, 2004
- Welcome Mar 17, 2004
Category
Useful links
- Handy list of online tools Feb 20, 2006
- Interesting site with many handy looking resources Jun 01, 2005
- Cool Windows XP Info. site Apr 24, 2005
- Handy list of Security Whitepapers Apr 14, 2005
- mailing lists Mar 21, 2005
- Everything you ever wanted to know about Oracle Security Nov 15, 2004
- Another of the NSA's security guides Nov 07, 2004
- Handy guide on SSH pub/priv key usage Nov 07, 2004
- Useful info on the consequenses of certain security settings Nov 05, 2004
- Sun Blueprints - Security Nov 03, 2004
- Interesting article on .NET code Security Nov 01, 2004
- Useful info on Windows Processes Oct 26, 2004
- Interesting article on Packet crafting Jun 29, 2004
- Interesting Linux Forensics site Jun 15, 2004
- Handy Collection of tips for Linux amongst other things Jun 15, 2004
- TCP/IP for security analysts redux Jun 10, 2004
- IP Address GeoLocation Site Jun 07, 2004
- DTI Security related publications Jun 01, 2004
- Handy list of Linux Live CD's May 21, 2004
- Microsoft Security Management column May 19, 2004
- Diceware Passphrase Generator May 12, 2004
- Prelude IDS Apr 27, 2004
- Online Portscan Apr 22, 2004
- Linux forensics Apr 14, 2004
- link to article about google hacking Mar 31, 2004
- Excellent list of PKI links Mar 30, 2004
- Cool List of general security Links Mar 30, 2004
- Infosecpedia Mar 24, 2004
- Listing of Microsoft Hotfixes by Product Mar 17, 2004
Category
Security books
- Software security Books Mar 18, 2004
Category
Web security
- Tools I use - Burp Jan 04, 2010
- Scotland on Rails Videos online May 27, 2009
- Scotland on Rails - Web Application Security Mar 31, 2009
- Thoughts on Secure Data Handling in web applications... Mar 25, 2009
- XSS in Rails Applications Mar 08, 2009
- Web 2.0 security it's not going to be pretty Mar 05, 2007
- Perils of persistent Logins... Jan 01, 2007
- Finally ! A sensible view on AJAX Security Dec 01, 2006
- Wapiti - Web App. Scanner Oct 08, 2006
- People finding new uses for Google's Code search engine Oct 05, 2006
- Really interesting study on the prevalence of SQL injection Oct 05, 2006
- XSRF example Sep 26, 2006
- Static analysis tool for web applications Sep 08, 2006
- whups sounds like someone forgot to get a Pen.Test done Aug 30, 2006
- Good post on the dangers of XSS Aug 30, 2006
- Some Interesting Javascript Attacks Aug 05, 2006
- Sometimes doing the right thing is wrong Jun 21, 2006
- Another new web app. security tool to look at Jun 13, 2006
- Paper on automated web application security testing May 25, 2006
- Web 2.0 Jan 20, 2006
- Cool overview of XSS attacks Sep 05, 2005
- The eternal tradeoff... performance annd security Aug 31, 2005
- Interesting examples of XSS attacsk Apr 20, 2005
- sql injection resources Apr 20, 2005
- Here's a service to avoid. Mar 20, 2005
- Spyware attacks on alternate browsers Mar 14, 2005
- The web is not a safe place to be these days! Mar 14, 2005
- Category-based Web content blocking... a bit useless really Dec 28, 2004
- An object lesson in the importance of maintaining domain names Dec 28, 2004
- Very nasty vulnerability in IE Dec 18, 2004
- Interesting opinion piece on Internet Explorer security Nov 29, 2004
- More info. on iframe and IE security in general... Nov 23, 2004
- More details on the Bofra Incident Nov 21, 2004
- Major website with infected links! Nov 20, 2004
- Very handy tip for Browsing from Windows Nov 20, 2004
- Online Browser Security Test Apr 07, 2004
- Out-of-Band communications to combat phishing Apr 06, 2004
- Example of a spoofed secure site Mar 27, 2004
- SSL phishing Article Mar 21, 2004
Category
General security
- Avoiding controls which are "designed to fail" Jun 23, 2008
- Are we Secure yet? (Part 1) May 04, 2008
- Security Shorthand problems Apr 08, 2008
- Some More UK Data Loss Apr 07, 2008
- Infosec Scotland Mar 08, 2008
- February OWASP meeting Mar 08, 2008
- Inagural OWASP Scotland Chapter Meeting Oct 21, 2007
- Risk Assessed Password Policies - Account Lockout Oct 06, 2007
- Risk Assessed Password Policies - Password Strength Sep 27, 2007
- Some great insight on thinking about security Aug 22, 2007
- SaaS vendor security. Aug 16, 2007
- Blackhat presentations are up - happy reading Aug 15, 2007
- Comments and Trackbacks off... Jul 10, 2007
- Data Tagging requisites.. Jun 03, 2007
- Comment on comment about comm.... ah you get the picture Jun 02, 2007
- Data security architecture Redux. Jun 02, 2007
- Excellent point on culture change Jun 01, 2007
- Data Centric Security... Yeuch Jun 01, 2007
- OWASP Conference slides up May 24, 2007
- Windows server 2008 to solve Microsofts last security problem? May 22, 2007
- OWASP Conference Milan May 19, 2007
- Being overly Litigious, good for Security? Apr 26, 2007
- A Difference between IT and Information Security Apr 22, 2007
- When Free Software is a bad idea Mar 26, 2007
- Data Leak Protection... Gah! Mar 19, 2007
- Security products != Secure products Feb 22, 2007
- Why Microsofts SDL may not lead to secure Microsoft Products Feb 16, 2007
- The Final Frontier for Microsoft Security - Complexity Feb 05, 2007
- Online Security scanners List Feb 05, 2007
- (Firefox) Extension Security Jan 28, 2007
- Security Bloggers Network Jan 28, 2007
- New Free Database scanner... a Windows only Java program! Jan 01, 2007
- New UK Computer Misuse Act... Yeuch Nov 22, 2006
- blog.searchinfosec.com Oct 27, 2006
- searchinfosec.com Oct 25, 2006
- Information Security Search Engine with Google Coop Oct 24, 2006
- Lightweight Windows... At last Oct 12, 2006
- Sitekey vulnerabilities article Aug 25, 2006
- More data Loss Jun 26, 2006
- TaoSecurity's take on the latest Jericho moves Mar 03, 2006
- Good example of one of those counter intuitive security things Feb 22, 2006
- Link to some more interesting throughts from Marcus Ranum Sep 10, 2005
- IT Security "Kitemark" from the UK Gov. Sep 09, 2005
- Another good example of social engineering Mar 30, 2005
- Good information source for 17799 Mar 20, 2005
- Bank Attack... Mar 17, 2005
- Wide open Webcams Jan 06, 2005
- More on Chip/PIN Jan 04, 2005
- Ethics and CISSP's Jan 04, 2005
- Article on the relationship between ITIL and InfoSec Dec 24, 2004
- Implications of SOX for Security Professionals Dec 19, 2004
- Chip and PIN... is it as secure as they say...? Dec 19, 2004
- Sensible comment on Google Desktop Search Nov 29, 2004
- Interesting Article about loss of customer data Nov 07, 2004
- Canadian reaction to the Patriot act Oct 31, 2004
- Microsoft Security Guidance Center Oct 30, 2004
- InfoSec questionnaire Oct 26, 2004
- Open source Monitoring framework Oct 25, 2004
- More on Passwords/passphrases Oct 25, 2004
- Interesting Blog Entry on passwords v passphrases Oct 22, 2004
- Now this doesn't sound like a good idea Oct 22, 2004
- bootable USB OS Oct 21, 2004
- Post from Bruce Schneier on SIMS and outsourcing Oct 21, 2004
- A real good example why relying on users is a bad idea Jun 26, 2004
- Interesting Post on MS & Least privilege Jun 26, 2004
- Security managers in court?! Jun 22, 2004
- Cell phone virus Jun 19, 2004
- More on network switches taking on a security role Jun 15, 2004
- Article about password alternatives Jun 01, 2004
- An example of software patents being a bad thing(tm) Jun 01, 2004
- Threat modelling tool May 31, 2004
- Good password sudy May 31, 2004
- Story on the Cisco code theft May 19, 2004
- Career path to Network Security May 19, 2004
- Good example of Social Engineering May 17, 2004
- US falls for Phishing... May 12, 2004
- Client Security, It's important! May 09, 2004
- Sasser worm Author caught May 09, 2004
- Article or Troll? Securing the 'Net May 03, 2004
- The end of ROSI, one can but hope Apr 23, 2004
- Encrpyted mail that doesn't interfere with A-V Apr 22, 2004
- UK companies... some way to go on security Apr 14, 2004
- Interesting e-mail attack Apr 10, 2004
- New Internal Network Monitoring Tools Apr 06, 2004
- ICMP chat Apr 04, 2004
- Hard Drive Information Leakage Apr 02, 2004
- Good presentation on Password Strength Mar 22, 2004
- Analogies in the Security World Mar 22, 2004
Category
Penetration testing
- Tools of the trade - USB powered Switches Mar 21, 2013
- Just the Facts Ma'am Jan 20, 2011
- Creating a Simple Vulnerability Database - Part 2 Oct 25, 2010
- Creating a Simple Vulnerability Database - Part 1 Oct 20, 2010
- Tools I use - Burp Jan 04, 2010
- Tools I use - Dradis Oct 28, 2009
- Testing SNMPv3 Aug 26, 2009
- Defcon 17 Aug 09, 2009
- Metasploit Resources May 04, 2009
- Rack for Pen Testing Mar 31, 2009
- Penetration Test Scoping Dec 22, 2008
- What is Penetration Testing? Dec 14, 2008
- PCI 6.6 clarification - Am I missing something? Apr 24, 2008
- The start of an interesting series of blogs Aug 22, 2007
- Handy Footprinting/research tool Aug 05, 2007
- More random thoughts on OWASP Jul 12, 2007
- HP to acquire SPI... Cenzic/Acunetix/... next? Jun 19, 2007
- List of SQL Injection scanners May 20, 2007
- White-Hats and Hacks Apr 14, 2007
- CREST launches Ethical hacker Certification Mar 23, 2007
- Pen Testing A go go Mar 15, 2007
- Pen Testing Tools aren't always the best solution Feb 28, 2007
- Security Assessments vs Penetration Tests Jan 31, 2007
- More on windows cached password recovery Nov 29, 2006
- SQL Injection tool Oct 14, 2006
- cool XSS DB Oct 10, 2006
- Walkthough of an XSS attack Aug 14, 2006
- Oracle Exploit Code Jul 19, 2006
- Cool Pen Testing Mind Map Jul 07, 2006
- New NMAP tool list Jun 21, 2006
- Article on AJAX security and Pen Testing Jun 19, 2006
- and yet more tool updates... Jun 15, 2006
- New hacme sites available Jun 15, 2006
- Presentation and information on iSeries Pen testing Jun 14, 2006
- Novel Social Engineering technique Jun 08, 2006
- More on SecuBat Jun 01, 2006
- Common Web Attacks Apr 28, 2006
- cool tool for bypassing Windows lock-down Dec 13, 2005
- Handy listing of MS Vulns to bulletins Oct 27, 2005
- Handy Perl Module for Pen Testing Oct 26, 2005
- Cool article on HP JetDirect Hacking Sep 12, 2005
- HTML validation in .NET 1.1 Sep 07, 2005
- Cool List of firefox plugins for pentesters Sep 06, 2005
- V. Handy new IIS exploit Aug 31, 2005
- Excellent presentation on Web Application Security Testing Tools Jun 27, 2005
- Info Systems Security Assessment... Jun 22, 2005
- cachedump Apr 21, 2005
- More Pen Test Resources Apr 14, 2005
- Mac OSX security site Apr 08, 2005
- unicornscan - fast port scanner... Apr 07, 2005
- Interesting article on Packet crafting Jun 29, 2004
- Scanrand info Jun 21, 2004
- MetaSploit redux Apr 27, 2004
- Exploits for real... Apr 10, 2004
- link to article about google hacking Mar 31, 2004
- Root Cause Analysis in penetration testing Mar 23, 2004
Category
Software security
- Scottish Ruby Conference follow-up - 2 - Securing your app. Apr 01, 2010
- Interesting new site? Feb 01, 2008
- New Years Resolution - Ask your Software vendors about security Jan 09, 2008
- What 2008 may bring... Dec 08, 2007
- Software security and Vulnerability Pimps Jan 08, 2007
- Analysis of the Vista Security Model Aug 02, 2006
- Security Review Process Aug 02, 2006
- Cool List of Fuzzers for Application testing work Mar 14, 2006
- Overview of security updates in .NET 2.0 Jan 29, 2006
- Implementing software whitelists Sep 28, 2005
- Article on Microsofts secure development Lifecycle Sep 19, 2005
- Online book on Secure Coding Mar 15, 2005
- Buffer Overflow Tutorial Mar 25, 2004
Category
Tutorials
- Illustrated guide to cryptographic hashes Mar 14, 2005
- Seurity Tutorials at NANOG Mar 27, 2004
- Buffer Overflow Tutorial Mar 25, 2004
Category
Spam management
- Spam appliances better than software? Mar 27, 2004
Category
Flights of fancy
- Information Appliance Tap. Mar 30, 2004
Category
Hardware
- Hardware review - Topton AMD Ryzen 7 5700U Jul 22, 2023
- Windows 8 on the Acer Iconia W500 Tablet Mar 25, 2012
- Yay for Cool new tech. Nov 02, 2007
- locking down USB Oct 25, 2004
- linux palmtop goodness Apr 03, 2004
- Information Appliance Tap. Mar 30, 2004
Category
Vulnerability management
- DNS vulnerability - are there any other mitigations apart from patching? Jul 22, 2008
- When is a debian user not a debian user? May 15, 2008
- Holy Apples to Oranges Comparison Batman Mar 05, 2007
- Very nasty solaris telnet bug Feb 11, 2007
- Cisco code execution Vulnerability Jan 25, 2007
- Using google to hack for you Nov 23, 2006
- More on Database vulnerability numbers Nov 21, 2006
- Database Vulnerability numbers Nov 17, 2006
- Java Nessus Client Aug 05, 2006
- Security flaws in OSX Apr 24, 2006
- New IE 0-day Mar 24, 2006
- Some good points on Client Security Jan 31, 2006
- Oracle Security Slowness Jan 26, 2006
- Vulnerability management article Jan 12, 2006
- Insight into worm authors motives Aug 31, 2005
- Today's IE vulnerability ... Aug 31, 2005
- Demo of Reverse engineering of MS Patches Jun 26, 2005
- IIS6 secure? May 08, 2005
- Very Nasty Unpatched Windows vuln. Apr 23, 2005
- Security Forest... now here's interesting Mar 31, 2005
- security disclosure threatened by lawsuits Mar 29, 2005
- Windows V Redhat (Linux) Security.... again Mar 27, 2005
- Know Your Enemy stats.. Linux getting harder to compromise... Dec 23, 2004
- Review of Vulnerability Assessments Tools Nov 09, 2004
- Vulnerabilities in Mulitple brownsers Oct 20, 2004
- Reducing Attack Surface Oct 20, 2004
- Unpatched IE holes exploited Jun 10, 2004
- Microsft Security Policy Compliance... May 19, 2004
- Detecting Rogue machines on client subnets May 06, 2004
- Security threats to open/closed source software May 06, 2004
- Spyware in the corporation Apr 22, 2004
- MS April Security Vulns... how many are there? Apr 14, 2004
- Vulnerability Management Stats, Apples and Oranges? Mar 31, 2004
- Open Source Vulnerability Database Mar 31, 2004
- Complexity of patching at microsoft Mar 31, 2004
- Paying for Patches?! Mar 31, 2004
Category
Wireless security
- Article about the legal rights and wrongs of WiFi Oct 31, 2005
- Airmagnet Spectrum analyser review Oct 05, 2005
- Interesting Wireless Security Development Sep 05, 2005
- Out of date opinions... Sep 05, 2005
- Mobile phone virii Aug 31, 2005
- Mobile Phone Tracking Aug 05, 2005
- Interesting new Bluetooth attack Jun 06, 2005
- link to an interesting article on L2 WLAN stuff Mar 29, 2005
- WEP ... toast this time? Dec 21, 2004
- Wardriving site Jun 19, 2004
- Interesting site on Wi-Fi news Jun 15, 2004
- Part II of an article on Wireless Pen Testing Jun 15, 2004
- Wireless Security raises its head again... and again Jun 06, 2004
- Cisco... Asleap at the wheel? Apr 14, 2004
- Default passwords in Cisco Wireless kit Apr 10, 2004
- Bluesnarfing story Mar 31, 2004
Category
Security learning resources
- Oracle Listener Security Guide Apr 09, 2007
- Free security related e-learning from Microsoft Mar 29, 2005
- security Journal Nov 01, 2004
- Security White Paper Site Apr 15, 2004
Category
Security tools
- PWDumpX Nov 29, 2006
- NMAP 4's out! Jan 31, 2006
- Cross Site Scripting Vulnerability scanner Sep 05, 2005
- Alternate data streams Apr 05, 2005
- Portknocking resources Apr 15, 2004
Category
Intrusion detection systems
- Prelude IDS Apr 27, 2004
Category
Networking
- Change of name for Ethereal Jun 13, 2006
- ToR Jul 24, 2005
- Excellent Interview with Marcus Ranum Jun 22, 2005
- Ping Tunnel May 15, 2005
- Handy tutorial on using SSH to bypass firewalls Mar 30, 2005
- Novel way of Learning about Cisco Products May 31, 2004
Category
Web services
- Pontentially handy tool for webservices work Sep 08, 2006
- Web Services Security Jun 15, 2004
- List of Web Services Jun 07, 2004
Category
Forensics
- The dangers of jumping to conclusions Apr 30, 2008
- Rootkit hunting Nov 02, 2005
- Interesting Linux Forensics site Jun 15, 2004
Category
Security policy
- Catching out dodgy security policies Dec 10, 2008
- 17799 User Group Aug 23, 2005
- PCI link and commentary Jun 23, 2005
- Interesting Article about Security Policies Jun 21, 2004
Category
E-mail security
- Appropriate trust on the Internet Sep 10, 2007
- Insecure encrypted email?! Oct 05, 2005
- Outsourcing mail security, hmmm... Jun 24, 2004
Category
Phishing
- Malware to defeat virtual keyboards Sep 19, 2006
- 2-Factor Auth in banking Attacked Jul 11, 2006
- noooooooo. Feb 22, 2006
- couple of Interesting phishing Stories Nov 17, 2004
- Article looking at some of the defences against phishing Nov 02, 2004
- Another anti-phishing initiative Jun 24, 2004
Category
Cryptography
- Appropriate trust on the Internet Sep 10, 2007
- Interesting ... and worrying info about a new encrypted rootkit Apr 09, 2006
- Interesting commentary on md5 collision attacks Mar 14, 2005
Category
Regulatory
- IT systems solve your SOx problems... Mar 14, 2005
- SOx increases fraud Risk?!! Mar 14, 2005
Category
Linux
- Yay for Cool new tech. Nov 02, 2007
- Seriously Cool - Easy IE on linux Sep 26, 2006
- Linux Keyboard Instruction Jun 01, 2005
Category
Programming
- Web Site Design Template Site Sep 01, 2005
- Perl plugin for Eclipse Jun 26, 2005
Category
Ruby on rails
- Scottish Ruby Conference Videos Up. Jun 01, 2011
- Creating a Simple Vulnerability Database - Part 2 Oct 25, 2010
- Creating a Simple Vulnerability Database - Part 1 Oct 20, 2010
- Scottish Ruby Conference follow-up - 2 - Securing your app. Apr 01, 2010
- Scotland on Rails Videos online May 27, 2009
- Scotland on Rails - Web Application Security Mar 31, 2009
- XSS in Rails Applications Mar 08, 2009
- Ruby on Rails Search Engine with Google Coop Oct 24, 2006
- Handy Ruby Framework for scripting Oct 21, 2006
- Learn something new... every 30 minutes Sep 28, 2006
- Dependant Destruction and the problems with Rails books Sep 28, 2006
- handy validator recipes for rails Sep 28, 2006
- Fix for XSS problems wih in_place_edit Sep 20, 2006
- Handy Rake Reference Sheet Sep 15, 2006
- Quick presentation on REST Sep 14, 2006
- New Version of Radrails out Sep 11, 2006
- Rails Resource Listing Sep 07, 2006
- Nice Forum Based interfact to the rails mailing list Sep 02, 2006
- Cool one way to deal with the rapidly moving rails Aug 31, 2006
- One of the problems of using a developing framework Aug 31, 2006
- CentOS ruby mysql plugin problem - solution Aug 30, 2006
- solution for in_place_editor problem Aug 28, 2006
- Migrations Posting Aug 27, 2006
- fix for in_place_editing problem I had Aug 27, 2006
- Ruby On Rails Aug 27, 2006
Category
Database security
Category
Off topic
- Why eBook Readers won't succeed for now... Sep 06, 2008
Category
Metasploit
- Scottish Ruby Conference & Breaking things with Ruby Mar 26, 2010
- Some Metasploit and Oracle Notes - Part 1 May 10, 2009
- Tonights Metasploit links May 07, 2009
- More metasploit resources May 05, 2009
- Metasploit Resources May 04, 2009
Category
Ruby
- Scottish Ruby Conference Videos Up. Jun 01, 2011
- Just the Facts Ma'am Jan 20, 2011
Category
Introductions
- Is This Thing on Jan 31, 2016
- A Rambling Introduction Mar 06, 2014
- Welcome to the ScotSTS blog May 22, 2011
Category
Ramblings
- Finding security Jun 08, 2014
- Why security is getting worse Mar 14, 2014
Category
Security
- House of Cards Apr 01, 2014
Category
Ssl
- Want to improve your security? Just turn off SSL! Nov 17, 2014
- Open Source Responsibility Apr 10, 2014
Category
Open source
- Open Source Responsibility Apr 10, 2014
Category
Browsers
- Changing Times - The end of Autocomplete='off' Apr 17, 2014
Category
Testing
- Changing Times - The end of Autocomplete='off' Apr 17, 2014
Category
Vmware
- Setting up a lab with VMWare workstation May 10, 2014
Category
Labs
- Setting up a lab with VMWare workstation May 10, 2014
Category
Authentication
- Changing Times - End of SMS Auth? Nov 02, 2014
Category
Burp
- Burp Plugin for use with JWT Tokens Jun 19, 2016
- Burp Passive Scanner Plugins with JRuby Jan 15, 2015
Category
Development
- Software Library Repositories and Security Mar 01, 2015
Category
Statistics
Category
Conferences
- So you're giving a conference talk May 23, 2015
Category
Docker
- Restricting Docker Access With a Reverse Proxy Sep 05, 2021
- Trying out Cosign Mar 21, 2021
- Exploring Rootless Docker Dec 19, 2020
- Container Vulnerability Scanning Fun Jun 21, 2020
- Comparing Docker and Podman - Basic Operations Feb 01, 2020
- Container Image Squatting in a Multi-Registry World Sep 25, 2019
- Docker and Kubernetes Reverse shells Aug 09, 2019
- Docker Capabilities and no-new-privileges Jun 01, 2019
- Traefiking in Presentations Mar 25, 2019
- Docker 18.09 - Making WSL that much easier Nov 11, 2018
- Using 'Try with PWD' buttons to demonstrate apps Oct 21, 2018
- WSL and Docker for Windows Mar 29, 2018
- Network Tools in Non-Root Docker Images Jul 23, 2017
- Keeping your Docker builds fresh Jul 09, 2017
- Docker 1.12 - Macvlan Jul 23, 2016
- A couple of initial thoughts on Docker Swarm mode and 1.12 Jun 19, 2016
- Presenting from a Docker Container Jun 06, 2016
- The Dangers of Docker.sock Mar 06, 2016
- New Docker Compose Features Feb 14, 2016
- Exploration in Docker Bridging Feb 07, 2016
- Docker 1.10 Notes - User Namespaces Feb 04, 2016
- Set-up a Complete Security Test Environment with One Command and Docker Compose Aug 15, 2015
- Using Docker for Security Testing Jul 23, 2015
- Some notes on docker Jul 05, 2015
Category
Vulnerabilities
- Verizon DBIR Vulnerabilities Redux May 02, 2016
- Verizon DBIR, Vulnerabilities and Cold Fusion Apr 30, 2016
Category
Presentations
- Presenting from a Docker Container Jun 06, 2016
Category
Kubernetes
- Using the API server proxy to bypass network policies Aug 21, 2026
- Show us Zee Pages Jul 20, 2026
- Variance of defaults - Microk8s RBAC Mar 11, 2026
- Beyond the surface - Exploring attacker persistence strategies in Kubernetes Sep 12, 2025
- Kubernetes Debug Profiles May 30, 2025
- Cap or no cap Apr 23, 2025
- CVE-2025-1767 - Another gitrepo issue Mar 14, 2025
- Exploring the Kubernetes API Server Proxy Jan 18, 2025
- When is read-only not read-only? Nov 11, 2024
- Exploring A Basic Kubernetes Network Plugin Nov 07, 2024
- The Many IP Addresses of Kubernetes Nov 01, 2024
- Fun With GitRepo Volumes Jul 10, 2024
- Taking a look at Kubernetes Profiling Jun 18, 2024
- Taking a look at the Kube-Proxy API Jun 16, 2024
- Fun with Kubernetes Authorization Auditing - multiple authz plugins Apr 22, 2024
- A final Kubernetes census Feb 17, 2024
- When is admin not admin?, when it's super-admin! Jan 06, 2024
- Exploiting CVE-2023-5044 Oct 29, 2023
- Fun with container images - Bypassing vulnerability scanners Apr 22, 2023
- Let's talk about Kubelet authorization Apr 08, 2023
- Let's talk about anonymous access to Kubernetes Mar 18, 2023
- Fun with Caddy - SSRF Testing Jan 21, 2023
- Fun with SSRF - Turning the Kubernetes API Server into a port scanner Jan 02, 2023
- Attack of the clones - Stealthy Kubernetes persistence with eathar, tòcan and teisteanas Dec 21, 2022
- PCI Compliance for Kubernetes in detail - Part 16 - Segmentation Dec 20, 2022
- PCI Compliance for Kubernetes in detail - Part 15 - Configuration Management Dec 18, 2022
- PCI Compliance for Kubernetes in detail - Part 14 - Version Management Dec 16, 2022
- PCI Compliance for Kubernetes in detail - Part 13 - Registry Dec 14, 2022
- PCI Compliance for Kubernetes in detail - Part 12 - Container Image Building Dec 12, 2022
- PCI Compliance for Kubernetes in detail - Part 11 - Resource Management Dec 10, 2022
- PCI Compliance for Kubernetes in detail - Part 10 - Patching Dec 03, 2022
- PCI Compliance for Kubernetes in detail - Part 9 - Runtime Security Nov 27, 2022
- PCI Compliance for Kubernetes in detail - Part 8 - Container Monitoring Nov 19, 2022
- PCI Compliance for Kubernetes in detail - Part 7 - Container Orchestration Tool Auditing Nov 12, 2022
- PCI Compliance for Kubernetes in detail - Part 6 - Secrets Management Nov 06, 2022
- PCI Compliance for Kubernetes in detail - Part 5 - PKI Oct 29, 2022
- PCI Compliance for Kubernetes in detail - Part 4 - Network Security Oct 23, 2022
- PCI Compliance for Kubernetes in detail - Part 3 - Workload Security Oct 15, 2022
- PCI Compliance for Kubernetes in detail - Part 2 - Authorization Oct 08, 2022
- PCI Compliance for Kubernetes in detail - Part 1 - Authentication Oct 01, 2022
- The Challenges of Assessing Kubernetes clusters for PCI Compliance Sep 20, 2022
- PCI Guidance for Containers and Container Orchestration Tools Sep 10, 2022
- Fun with Windows Containers - Popping Calc Sep 03, 2022
- Auditing RBAC - Redux Aug 14, 2022
- Fun with Capabilities Jul 31, 2022
- Let's talk about Kubernetes on the Internet Jul 03, 2022
- Escaping the Nested Doll with Tailscale Jun 11, 2022
- Fun with secrets - Where did they go? Feb 12, 2022
- Fun with unicode - messing with output Nov 06, 2021
- Fun with CRDs - Overwriting core types Nov 01, 2021
- A Census of Kubernetes Clusters Jun 05, 2021
- Getting into a bind with Kubernetes Jan 16, 2021
- Kubernetes is a router Jan 03, 2021
- Escalating Away Dec 12, 2020
- The revenge of system:masters, return of the AKS Nov 29, 2020
- From Stackoverflow to CVE, with some laughs along the way Oct 15, 2019
- Accessing Cluster IPs from the Outside Oct 03, 2019
- Kubernetes Security Lab with Kind and Ansible Sep 14, 2019
- Making it Rain shells in Kubernetes Aug 10, 2019
- Certificate Authentication and the Golden Ticket at the heart of Kubernetes Apr 16, 2019
- The most pointless Kubernetes command ever Apr 01, 2019
- Kind of Insecure Test Clusters Mar 04, 2019
- Kubernetes authentication woes and secret user database Sep 10, 2018
- Auditing Kubernetes Access Control May 23, 2018
- Some notes on Kubernetes Network Policies Mar 25, 2018
- Kubernetes Attack Surface - etcd May 01, 2017
- Kubernetes Attack Surface - Service Tokens Apr 02, 2017
- Kubernetes Attack Surface - cAdvisor Oct 14, 2016
- Kubernetes - From Container to Cluster Oct 08, 2016
Category
Owasp
- Some thoughts on the new OWASP Top 10 - A7 Apr 14, 2017
Category
Containers
- Do containers still contain? Jun 03, 2026
- Bitnami Deprecation Aug 21, 2025
- Fun with privileged container breakout Aug 06, 2023
- Fun with Containers - Adding tracking to your images Feb 11, 2023
- Containers and Low Ports Jul 03, 2021
- When is a Vulnerability (possibly) not a vulnerability Nov 22, 2020
- Docker Hub - Watch out for old images Aug 12, 2018
- Docker containers without Docker Aug 05, 2018
- Exploring Kata Containers Jul 23, 2018
- Exploring gVisor Jul 22, 2018
- Exploring Public Kuberetes Certificates Jul 19, 2018
- Container Testing - A small tools container with SSH Apr 15, 2017
Category
Capabilities
- Linux Capabilities and when to drop all Aug 27, 2017
Category
Github
- Shells in Github Actions Aug 25, 2019
Category
Podman
Category
Wsl2
- Custom Pentest Distributions using WSL2 May 31, 2020
Category
Arm
- Project Volterra - ARM Desktop Oct 30, 2022
Category
Cloud
- Getting a VS Code Server running on EC2 Jul 16, 2023
Category
Opentelemetry
- Adding Open Telemetry to Container Stacks Feb 10, 2024
Category
Tailscale
- Using Tailscale for persistence Mar 24, 2024
Category
Seccomp
- Am I Still Contained? Jun 09, 2025
Category
Llms
- Dearbhadh Retrospective Oct 08, 2026
- Refreshing Designs Sep 25, 2026
- Personal Software and BaremetalVMM May 10, 2026