Skip to content
war + code
About
Search
Archive
2024
November
The 'malignant genie' problem
2024-11-20 — 3 min read
2023
October
No you can't 'WAF patch' curl vulns CVE-2023-38545 and CVE-2023-38546
2023-10-11 — 4 min read
2022
July
What can you do with Web3 anyway?
2022-07-24 — 5 min read
Filecoin and Arweave vs. copyright enforcers
2022-07-10 — 6 min read
2021
November
2021 OWASP Global AppSec talk on open source for anti-bot
2021-11-11 — 2 min read
July
Towards a general anti-automation and botting program
2021-07-31 — 39 min read
January
Weaponizing Apify for mass bug bounty $$$
2021-01-16 — 4 min read
Hacking naked Akamai ARL at scale
2021-01-15 — 2 min read
Defeating Parler's proprietary CAPTCHA
2021-01-11 — 3 min read
2020
December
Goodreads - sex spam attack vector?
2020-12-20 — 1 min read
September
Hacking a Gmail account with the owner's gym habits
2020-09-22 — 3 min read
How to identify in-client bot detection
2020-09-19 — 4 min read
August
HOPE 2020 'Stop Botting My Baby' talk on thwarting malicious automation
2020-08-30 — 1 min read
July
War and Code moves off Medium
2020-07-22 — 2 min read
2019
January
Introducing the Open Ethereum Security Course
2019-01-01 — 2 min read
2018
November
I don't care if you blockchain
2018-11-25 — 2 min read
April
Hacking 'Dad Simulator'
2018-04-07 — 4 min read
March
Getting started with Headless Chrome on Windows
2018-03-12 — 1 min read
2017
October
Do security to learn security
2017-10-08 — 2 min read