Skip to content



Occasionally I’ll write and deliver a presentation… this is where you can get the slides and I can find them in the future!

Exploiting SNI SSRF
to access the
AWS IMDSv2 service (May 2023 – DC151)

NGINXDay2022: NGINX LDAP reference implementation Zero Day Vulnerability (May 2022 – DC151)

Poisoned Password Reset Links (October 2020 – DC151)

An Introduction to Kerberos Abuse (October 2018 – DC151)

Exploiting JSONP (June 2018 – DC151)

Fine Grained Password Policies (June 2016)

My Continuing Mission to Replace Myself with a Small Script (September 2014)

GPG Encryption (September 2012)