Lanmaster53.com - Blog

2024

Jul 15 Email is Dead. Long Live Email.

2023

Jul 5 Burp BChecks: First Impressions
Feb 1 Prototype Pollution in Flask

2022

Jan 5 Review: Burp Suite Certified Practitioner (Part 3 Final)

2021

Nov 18 Review: Burp Suite Certified Practitioner (Part 2)
Nov 15 Review: Burp Suite Certified Practitioner
Jun 14 No-Knowledge API Discovery

2019

Jun 14 Dynamic Discovery of Mass Assignment Vulnerabilities
Feb 22 A Decade of Training

2018

Dec 8 Get Off Your Butt and Teach Your Kids to Code
Jun 18 XSS Active Defense
May 24 SQLi Exploiter: Exploiting Complex SQL Injections
Mar 15 Report Spam. Get Owned.

2017

Aug 26 Cooling Down the Hottest Ticket in Town
Apr 5 Handling Missed Vulnerabilities

2016

Dec 1 Proxying thru Virtual Client VPNs
Jul 15 Fun with XSShell
Mar 11 Exploring SSTI in Flask/Jinja2 - Part 2
Mar 9 Exploring SSTI in Flask/Jinja2

2015

Dec 2 Validating Redirects with Hyperlinks
Jun 11 Regex: Regularly Exploitable
May 21 Recon-ng Update (v4.6.0)
May 12 Method Interchange: The Forgotten Vulnerability

2014

Oct 29 Session Fixation Demystified
Oct 2 WUDS: Wi-Fi User Detection System
May 21 Cross-Site Trust Exploitation (XSTE)
May 16 Recon-ng Update (v4.0.0)
May 11 Raspberry Pi - Pianobar
Mar 1 DOM-based Cross-Site Scripting, Revisited
Feb 17 Defending Against Harvesting Attacks on Registration Systems
Jan 19 Recon-ng Update (v3.3.3)

2013

Nov 14 Recon-ng Update (v3.0.3)
Oct 23 Getting Shell in Modern Restricted User Environments
Jul 17 Multi-POST Cross-Site Request Forgery
May 27 IPS Avoidance with Vulnerability Scanners
May 24 Public Facing LDAP Enumeration
May 24 Manual Local Hash Extraction
May 23 Catching and Cleaning a Phish
Apr 19 A Work in Progress
Mar 4 Taming the Stubborn Tomcat

2012

Dec 4 Defending Against SSL Stripping Attacks

2011

May 27 7 Linux Shells Using Built-in Tools
May 13 Stealth Cookie Stealing (XSS technique)
May 9 Local File Inclusion to Remote Command Execution using SSH
Apr 21 Official Release: eapmd5crack.py
Apr 21 Defeating 802.1x with Marvin
Feb 28 Creating Complex Password Lists with John the Ripper

2010

Sep 23 ESPN Fantasy Football - The Complete Attack
Aug 2 Hacking the DEFCON 18 Badge
Apr 16 No Nmap, No Permissions, No Problem