// Insights

Threatzer Blog

Field notes on detection engineering, security automation, and the craft of defending modern environments.

March 2, 2024 · 3 min read

Yubikey FIDO2 Security for SSH/GIT on WSL

Windows Subsystem for Linux (WSL2) provides a powerful Linux environment directly within Windows, eliminating the need for dual-booting or virtual machines. Despite its advantages, WSL has limitations…

SSH WSL WSL2 GIT YUBIKEY FIDO2 Security
Read →
March 4, 2018 · 4 min read

Vulnerability Disclosure: security.txt

Most security professionals are familiar with robots.txt, but fewer understand the emerging standard known as security.txt and its potential impact on vulnerability disclosure processes. This article…

security.txt RFC5785 vulnerability disclosure security standards
Read →
February 19, 2018 · 2 min read

DKHOS CTF: General Review

In January 2018, I received an invitation to participate in DKHOS, one of Turkey's most prominent Capture The Flag (CTF) competitions. Our team, KHORNE, entered with dual objectives: to secure first…

CTF Red Team Competitions Team Strategy Competition Analysis Offensive Security
Read →
February 19, 2018 · 3 min read

DKHOS CTF: Technical Challenge Writeup

I referenced the 7-Zip file format documentation at https://www.7-zip.org/recover.html to identify the proper header and footer values required for reconstruction.

CTF Forensics Web Security OSINT Path Traversal File Recovery Filter Bypass
Read →
February 9, 2018 · 3 min read

Binary Analysis with Immunity Debugger

Reverse engineering represents a critical discipline within the security research domain. During my graduate studies in Cyber Security and through various CTF competitions, I've developed fundamental…

Reverse Engineering Binary Analysis Immunity Debugger Algorithm Analysis
Read →
February 4, 2018 · 4 min read

Web Shell Exploitation Walkthrough

This security exercise required exploiting a web application through multiple vulnerabilities to gain shell access and execute a specific file (/secret/unlockme) to obtain a verification code.

Web Security MITRE ATT&CK LFI SQL Injection File Upload Path Traversal Authentication Bypass
Read →
February 3, 2018 · 4 min read

Ledger Nano S for PGP, SSH, and Git Signing

As security professionals increasingly recognize the importance of protecting private keys, hardware security devices have become an essential component of robust security postures. This article…

PGP Git SSH Hardware Security Ledger Nano S Digital Signing Ledger
Read →