Archive

NewsletterNewsletter
[tl;dr sec] #31 - Instrument with Frida, Free Course on Attacking Apps in AWS/Azure, VM with 8 C&C Frameworks

[tl;dr sec] #31 - Instrument with Frida, Free Course on Attacking Apps in AWS/Azure, VM with 8 C&C Frameworks

Use Frida from a Burp extension or web interface, continuous cloud security, fighting misinformation at scale.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #29 - Testing GraphQL, Bug Bounty Programs, & AWS Service Control Policy Best Practices

[tl;dr sec] #29 - Testing GraphQL, Bug Bounty Programs, & AWS Service Control Policy Best Practices

Tool for testing GraphQL endpoints, how to run a great bug bounty program, restricting your AWS account with Service Control Policies, hardening Linux.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #28 - 25 Years of Fuzzing, Secrets Management, Security Questionnaires

[tl;dr sec] #28 - 25 Years of Fuzzing, Secrets Management, Security Questionnaires

Some history and overview of fuzzing, preventing/detecting/remediating leaked secrets, static analysis, macOS security, reflections on privacy post COVID-19.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #26 - Learnings from Duo, Auto-healing Clouds, Fuzzing

[tl;dr sec] #26 - Learnings from Duo, Auto-healing Clouds, Fuzzing

Jon Oberheide on Duo, self-healing AWS environments, Google's fuzzer benchmarking and CIFuzz, securing Windows & MS accounts at scale.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #25 - BSidesSF and RSA, Demystifying Container Security, Your Privacy Online

[tl;dr sec] #25 - BSidesSF and RSA, Demystifying Container Security, Your Privacy Online

Round-up of BSidesSF and RSA + my updated slides, overview of container security, pen testing K8s walkthrough, maintaining privacy online.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #24 - BSidesSF/RSA, tl;dr sec Mascot, REST API Fuzzing, AWS Auto-remediation

[tl;dr sec] #24 - BSidesSF/RSA, tl;dr sec Mascot, REST API Fuzzing, AWS Auto-remediation

I'm speaking at BSidesSF and RSA 2020, tl;dr sec stickers, stateful fuzzing of Swagger APIs, auto-remediate AWS issues, canary pro-tips, red team cheatsheets.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #23 - OSINT, Automatic Exploit Generation, Cloud Security

[tl;dr sec] #23 - OSINT, Automatic Exploit Generation, Cloud Security

OSINT tools, tips, & tricks, presentations on automatically find and exploiting bugs, a code-aware <code>grep</code>, how to assess another company's security posture.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #22 - Post AppSec Cali, K8s Security Monitoring at Scale

[tl;dr sec] #22 - Post AppSec Cali, K8s Security Monitoring at Scale

DevSecOps talks & tools from AppSec Cali, PoCs to decrypt WhatsApp messages, Kubernetes monitoring and CTF, Python static analysis tools.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #21 - AppSec Cali, Bezos's Phone, Fuzzing

[tl;dr sec] #21 - AppSec Cali, Bezos's Phone, Fuzzing

I'm speaking at AppSec Cali 2020, details on Bezos's phone being hacked, fuzzing talks and tools, Java deserialization, K8s and GraphQL tools.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #18 - \"GitHubification\" of Infosec, Ring Privacy, Ransomware Economics

[tl;dr sec] #18 - \"GitHubification\" of Infosec, Ring Privacy, Ransomware Economics

Blue teams can become highly leveraged by sharing knowledge effectively, Ring's partnerships with the police, viewing ransomware through an economic lens.

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #17 - AWS Re:Invent, Supply Chain Security, Absolute AppSec

[tl;dr sec] #17 - AWS Re:Invent, Supply Chain Security, Absolute AppSec

A number of interesting new AWS services, backdoors on PyPI, I had a blast on the Absolute AppSec podcast, and tl;dr sec hits 500 subscribers! 🚀

Clint Gibler
Clint Gibler
NewsletterNewsletter
[tl;dr sec] #16 - Art of Vulnerability Management, Cloud Security, Flan Scan, SCORE Bot

[tl;dr sec] #16 - Art of Vulnerability Management, Cloud Security, Flan Scan, SCORE Bot

Building an effective vulnerability management process, K8s/AWS tips, network & code scanning tools, privacy preserving VA, and the Siege of Gondor.

Clint Gibler
Clint Gibler
FirstBack
192021222324
Next Last