Site Update: Cloudflare
This site now uses CloudFlare
Infosec
AWS Cloudwatch
AWS CloudWatch enables monitoring and alerting on cloud events.
AWS Security Hub
AWS Security Hub eases the pain of cloud monitoring
Protect AWS API Gateway with AWS WAF
Help protect APIGW from attackers with AWS WAF
AWS CloudTrail
AWS CloudTrail is the cornerstone of cloud SECOPS
Public Bug Bounty Rules of Engagement
I share my experience and lessons learned from operating a public bug bounty.
Extract files from network capture
Extract files from tcpdump or wireshark captures
Decrypting Java TLS to View in Wireshark
Use this to recover TLS session keys for a java program.
Mallory in the Mobile
Use mallory proxy to view non-https encrypted mobile traffic
The new face of the security team DoS
Nearly a year ago, I wrote about an emerging trend I observed with some of the bounty researchers I was interacting with. This screed can be considered an extension of that article. There an emerging trend I’m noticing - I’ve been receiving more messages like the following: Hey , I found Security Vulnerability in your web application ,which can damage site as well as users too.For security purpose can we report vulnerability here,then will i get bounty bounty reward in PayPal or Bitcoin for Security bug ? ...