The Curious Engineer

All blogs / Security

Lolware

lolware.net

Blogging on security and insecurity

Security

’15’20’25
Posts
52 from 12 Dec 2012 to 10 Jun 2026
Posting
now and then (5 in the last year)
Kind
personal blog
Feed
https://lolware.net/rss.xml

2026 4

  1. Security Wrench Attack Mitigation
  2. View All posts
  3. Meta has an answer to Youtube Face
  4. Hack Smarter - Evasive

2025 2

  1. Using Powershell to manage binary registry keys
  2. openRT Vulnerabilities

2024 1

  1. Windows 11 - Enable "Firmware Protection" by InTune or otherwise

2023 1

  1. Time to Shutdown CT Advisor

2022 5

  1. My Cats implement Diffie Hellman in Powershell
  2. How vssshield kills ransomware
  3. Encoding Neil Madden's Psychic Signatures
  4. Using Microsoft Sentinel to roll honey tokens on Windows
  5. Exploit for many Wordpress themes - CVE-2022-0316

2021 3

  1. Using Azure MFA for on premises Active Directory
  2. Neutralising Script Based Ransomware
  3. React XSS Protection Cheat Sheet

2020 1

  1. Obtaining Corporate Credentials via the Autodiscover Circus

2019 5

  1. Secure Active Directory management with PAM and JEA
  2. Dumbest pentesting script to ever succeed
  3. Abusing Google Safebrowse for phished credentials URLs
  4. Hack The Box DAB Writeup Security Assessment
  5. Reverse engineering GoDaddy's tracking script

2018 3

  1. Enumerating Azure Federated Domains
  2. Security and Caching headers with S3 websites
  3. Open Source marketing after two years

2017 5

  1. Intercepting and Capturing MFA Logons
  2. The bloat of AMP
  3. Using Hadoop with Clojure to process Active Directory Data
  4. Netregistry has no support for MFA either
  5. Continuous Backup Tests with Docker

2016 6

  1. Awesome security audit
  2. mwave requests bank logins of customers
  3. The improving state of SSL deployment
  4. Intelligent Backend Routes with Rails and nginx
  5. Use protobufs - now
  6. Argon2 code audits - part one - Infer

2015 6

  1. Let's Encrypt - It's happening
  2. Testing ReactJS for XSS vulnerabilities
  3. Property based tests, contracts with Ruby
  4. Concurrent Vulnerability scanning with Erlang
  5. Fuzzing nginx - Hunting vulnerabilities with afl-fuzz
  6. nginx - Built against LibreSSL

2014 3

  1. Taking the Matasano Crypto Challenge
  2. HP D2D / Storeonce Backdoor
  3. libscrypt - password hashing library

2013 4

  1. Connectwise Password Recovery
  2. 2013 09 23 loldns
  3. cPanel Wordpress version/vulnerability scanner
  4. Forensic research into an FX29 Compromise

2012 2

  1. HP P2000 on VMware - LUN 0
  2. McAfee Updater - I just shat on your filesystem

Undated 1

  1. Contact Me