Browsing Tag
hacking
223 posts
Tainted Trails: Unmasking Vulnerabilities with Source and Sink Analysis
There’s a single idea underneath almost every code-level vulnerability finding you’ll ever make: something untrusted got somewhere dangerous…
How to Select the Right Target for Vulnerability Research: A Practical Guide
I’ve watched a lot of people burn months of research time on the wrong target — a piece…
The Three Pillars of Vulnerability Research: Code Review, Reverse Engineering, and Fuzzing
Every technique in vulnerability research eventually traces back to one of three disciplines: reading code (or its equivalent…
Vulnerability Research vs. Penetration Testing: Different Goals, Shared Techniques
When I talk to people entering the cybersecurity field, one confusion comes up more than almost any other:…
What Is a Vulnerability? A Deep Dive into Security Flaws, CVEs, and Misclassifications
I still remember the first time someone asked me to explain “what is a vulnerability” in plain language…
Inside the Mind of a Zero-Day Hunter: Fuzzing and Finding the Invisible
There’s a particular kind of patience that zero-day hunting demands, one I didn’t fully appreciate until I watched…
pipal: A tool for analyzing password statistics from password dumps to assess password security
When I first started digging into password security research, I kept hearing the same name from people who…
cutycapt: A tool for capturing screenshots of web pages and converting them to images
I’ve used a lot of screenshot tools over the years, but CutyCapt remains one of my favorites for…
cherrytree: A hierarchical note-taking application for organizing notes and information
If there’s one piece of non-hacking software I recommend to every security professional I mentor, it’s CherryTree. It’s…
hashdeep: A tool for computing and verifying hash values of files in a directory
Every digital forensics investigation I’ve worked on starts with the same non-negotiable step: proving that the evidence I’m…