Viewing profile — ikisusi

I hope that providers whose APIs responded and interacted fully over unencrypted HTTP would go back to their historical access logs and check how widespread using plaintext HTTP is…

I was suddenly much more afraid of widespread router takeover botnets with DNS MITMs re-emerging after stumbling on this. Started thinking about the cheer number of API traffic tod…

There is a recent rule based python tool for doing DNS record based service dependency fingerprinting at https://github.com/joniumGit/dnsmule/ . It was written as part of a master'…

Coincidentally Chrome 72 upgrade seems to break adblockers so that they can't block google analytics, and maybe other ads/tracking as well, if web page uses a service worker: https…

There is a 30 seconds video based on 90 minutes of a collaborative experiment by 22 fuzzing practitioners. Aim was to write down couple of points about fuzzing state of the art. Vi…