Blog
A Tragic Labor of Tremendous Incompetence
Offensive security, detection engineering, and the occasional argument about what a finding actually proves.
Tags
The fix that survives the update
6 min read
Finding the stored XSS took an afternoon. Fixing it so it stayed fixed was the actual job.
- pentest
- web-security
- wordpress
- remediation
StonkSmith: My answer to the gap that modern finance apps create.
7 min read
I just want reliable stats. Not another thing I have to download.
- side-projects
- automation
- python
Is this thing on?
5 min read
"We were not detected". Useful or not?
- red-team
- reporting
- detection