Overview
Occasionally I’ll write and deliver a presentation… this is where you can get the slides and I can find them in the future!
Exploiting SNI SSRF to access the AWS IMDSv2 service (June 2024 – BSidesLeeds2024)
BSidesLeeds 2024 TLS SNI SSRF AWS v3
Exploiting SNI SSRF
to access the
AWS IMDSv2 service (May 2023 – DC151)
NGINXDay2022: NGINX LDAP reference implementation Zero Day Vulnerability (May 2022 – DC151)
Poisoned Password Reset Links (October 2020 – DC151)
An Introduction to Kerberos Abuse (October 2018 – DC151)
Exploiting JSONP (June 2018 – DC151)
Fine Grained Password Policies (June 2016)
My Continuing Mission to Replace Myself with a Small Script (September 2014)
