Stories by guedou

Exploiting Public App_key Leaks to Achieve RCE in Laravel Applications

A Look into the Secrets of MCP: The New Secret Leak Source

Compromised tj-actions/changed-files GitHub Action: A look at leaked secrets

Demystifying Docker: Understanding and Optimizing Your Images

What Happened in the U.S. Department of the Treasury Breach? A Detailed Summary

Ultralytics Supply Chain Attack: Connecting the Dots with GitGuardian Data

Hardcoded Secrets: From Development to Production

Docker Zombie Layers: Why Deleted Layers Can Still Haunt You

Demystifying GitHub Private Forks – The Hidden Danger of Cached View

Scapy in the Browser

Let’s Go into the rabbit hole– the challenges of dynamically hooking Go programs

Vulnerabilities in the TPM 2.0 reference implementation code

Post-Exploitation: Abusing the KeePass Plugin Cache

When eBPF meets TLS. Defeating TLS encryption with eBPF tricks [pdf]

A Brief Overview of Auditing XCMv2

Status of post-quantum cryptography implementation

Digging into Linux Namespaces

Mattermost End-to-End Encryption Plugin

Kdigger: A Context Discovery Tool for Kubernetes Security Audits

Scapy Turned 18. Boy They Grow Up Fast, Don’t They

1