Bug Bounty - Cross-site request forgery is a thing

In this post I will explain when CSRF can be a serious issue. I will use an example for which I got promoted $2.400 as bounty.
Read more →

I hacked the german armed forces, and all I got …

This blog post will describe my adventure with the german armed forces and how I earned more than just a lousy T-Shirt. Topic: Vulnerability Disclosure Policy - Deutsche Bundeswehr
Read more →

My journey to OSEP

This blog post will give an insight into the world of becoming an Offensive Security Experienced Penetration Tester as I have experienced it
Read more →

[Gophish] Sophisticated Setup

In this article I will show how you use Gophish, Caddy and Maddy with webhook to setup a complex phishing framework situation
Read more →

[goshs] Part #4 - Eyecandy, anyone?

In this blog post I will use a third-party library called parcello to embed static files into my project. I will use different javascript libraries and a lot of css to design goshs
Read more →