Eduard Schwarzkopf

Topic

Security

A collection of 8 issues

I Accidentally Exposed TLS Secrets to GitHub, Let's Learn From It

woopie fucking doo! I exposed secrets to my public GitHub repository. Join me on a ride! This wasn't some complex supply chain attack or sophisticated breach. This was me! Using tools without knowing the impact nor having proper safety nets in place. Here's what happened, how I fixed it, and

Proxmox, use harden!

In the wild world of the Internet, Proxmox is vulnerable like a freshly hatched Caterpie. So let's evolve it into a Metapod and harden it! A default Proxmox VE installation is ready to virtualise, but of course, we want to also increase the security. Because we do not want anybody

CloudGoat – vulnerable_lambda with Pacu

As I aim to sharpen my cloud security expertise, I embrace the concept of practical, hands-on experience. Rhino Security Labs provides the indispensable tools for this journey. CloudGoat will deploy intentionally vulnerable cloud environments. Yes, intentionally vulnerable! So when you use it yourself, make sure to use a dedicated AWS

Secure Your AWS Account: The Critical Importance of MFA and the Ease of a CloudFormation Stack

The world of cybersecurity is grappling with increasingly complex threats, with sophisticated cyber-attacks becoming the norm rather than an exception. A testament to this is the recent revelation from Microsoft, where the security team uncovered an intrusion by a nation-state actor dubbed Midnight Blizzard. The attack unveiled a critical gap:

I Exposed AWS Access Keys, On Purpose: Here's What I Learned and How I Boosted Incident Response

Introduction Who doesn't know that, you just write a quick fix for your code? After a few hours, the function is finally finished. Proud to have finally done it. Your Brain, toast. Your commit, fast. Pushing your credentials without realising, even faster! Let's find out what happens next. It happens

Reverse engineering an API with Burp Suite

As I've mentioned in my previous post, this method is more suited for penetration testing, since we are going to use Burp Suite for this, which we can use later for more research on an API. Preparation Again you need to make sure we've got all tools installed and set

Reverse engineering an API with Postman

In this tutorial I want to show you how to reverse engineer an API and then use it in Postman. Preparation Before you can get started, you first need to make some preparations so that requests from an API can be saved. FoxyProxy Install FoxyProxy for your Browser, it is

Let's hack my wifi - Part 1

Today I tried to hack my wifi, this is what I've learned