We just posted our AttackerKB @rapid7.com Analysis for the recent Cisco 0day chain; CVE-2025-20362 and CVE-2025-20333. Full technical root cause analysis of both the auth bypass and buffer overflow are here: attackerkb.com/topics/Szq5u...

Whitepaper ➡️ assets.contentstack.io/v3/assets/bl...

Exploits ➡️ github.com/sfewer-r7/Br...

New video looking at some interesting printer vulnerabilities, found by @stephenfewer.bsky.social (@rapid7.com) 🖨

▶ youtu.be/--SaQKmcyiU

One week until @bsidesbelfast.bsky.social, Who's going? 👀

As always, I've got stickers - come say hi! 👋

Video walkthrough for the "Fancy Login Form" web challenge from the @why2025.bsky.social CTF 🚩

Learn how to exfiltrate data via CSS injection ➡️ youtu.be/jUjlj2z5jJk

Played the @why2025.bsky.social CTF over the weekend 💜 Here's some web challenge writeups 👇

book.cryptocat.me/ctf-writeups...

Famous beef noodle soup (broth simmering continously for over 50 years!) in one of my all time favourite cities - Bangkok! 🇹🇭 Any hackers here wanna hang out, hmu 🤙

Singapore 🇸🇬

I've done a lot of awesome hacker meetups but this one was next level! So nice to meet brutecat, dreyand and IDlSSEVERYTHING🔥 These guys have some crazy skills (and stories), hope to meet again in the future 💜

I'll be in Singapore this weekend! I know there's lots of cool hackers there so hmu if you wanna get some coffee/food/drinks 🥰

Finally back in #KualaLumpur 🙏 Meeting some of my favourite Malaysian hackers for food/drinks tomorrow night. If you wanna join, let me know! 🥰

🍉

My OSWE review, tips/tricks.. general ramblings 👀😅

youtu.be/IK4t-i5lDEs

Just finished my OSWE exam 👀 Today I write up the report.. while watching #NahamCon 😌

Here is the official writeup of my XSS challenge on Intigriti. I think it contains some fun browser trivia even for those who did not look at the chall

joaxcar.com/blog/2025/05...

The legendary @joaxcar.bsky.social made a really interesting XSS challenge this month for Intigriti. My solution involved winning a race condition with 100