Security Engineer with a dash of software. Originally from Stockholm, now in Berlin. I like to hack things.
infosec
Ettercap, Arpspoof and DNSSpoof Examples
I'm spending the night learning about the tool ettercap. May as well write down what I learn for future reference.
ReadEnumerating Cinema Tickets
This is a hack I disclosed around a year ago to the company in question. It involves the company SF, which has a
ReadOne.com CSRF and XSS
About a year ago I found a few vulnerabilities on the one.com website. For those of you that don't know, _one.com_ is
ReadBypassing Authentication to a Paid Wifi Hotspot
I spent the last week and a few days at my family's summer place on the
ReadMD5 Length Extension Attack
I found this great explanation of a length extension attack [here by Skullsecurity](https://blog.skullsecurity.org/2012/everything-you-need-to-know-about-hash-length-extension-attacks)
Readlabel clickjacking and javascriptless csrf
Another niche attack. I happened to notice the interesting behaviour of
ReadWeb Timing Attacks, Continued
Continuing on the subjects of timing attacks, I recently found a small
ReadGetting timing output from CSRF exploits
I've been playing around with the idea of timing attacks lately. The way
Read