Posts from '2024'
An opinionated ramp up guide to AWS Pentesting
The guide I wish I had to learn AWS pentesting read more →
TunnelVision (CVE-2024-3661) - With Extra Commentary
A copy of TunnelVision but with notes from me in 2026. read more →
Security Design Flaws and Serverless Billing
A rant on AWS billing models and design flaws read more →
The Crow Flies at Midnight: Exploring Red Team Persistence via AWS Lex Chatbots
Abusing AWS Lex to make backdoors. read more →