DHCP Exhaustion and Rogue Servers
A blog on how attackers can starve a network of IP addresses and set up rogue DHCP servers to intercept traffic.
ANORAK WRITES
Exploiting AWS S3 Bucket Misconfigurations
A blog on how simple misconfigurations in AWS S3 buckets can lead to devastating data breaches.
Windows Privilege Escalation via Unquoted Service Path Vulnerability
A blog on how the Unquoted Service Path vulnerability works and how to defend against it.
Evil Twin Attacks
A blog on how Evil Twin attacks work and how to defend against them.
Lateral Movement with Pass-the-Hash
A blog on how Lateral Movement works with Pass-the-Hash (PtH) attacks in Windows environments, and how to defend against them.
Lakera Gandalf: Agent Breaker
Firsthand insights from my experience as a Gandalf - Agent Breaker beta tester, uncovering real prompt injection exploits and AI security lessons.
The Art of Subdomain Enumeration
A comprehensive guide on how to discover and exploit subdomains
Evading Firewalls and IDS with Nmap
A technical guide on how to use Nmap's evasion techniques to bypass modern firewalls
Shodan 101
Using the search engine to find vulnerable IoT devices and exposed servers
Understanding Fileless Malware
A deep dive into how fileless malware operates and how to defend against it