TechAnarchy

Paxton10 is an access control system widely deployed across commercial buildings in the UK and Europe.

Tl;dr 10 prompts, 293 tool calls, 224million tokens, 90 minutes*, one guardrail and Claude Opus was able to take a patch for a zero day, identify 3 critical vulnerabilities and create a full chain proof of concept resulting in unauthenticated code executi…

There has been a lot of hype around Mythos and Large Language models being able to find and exploit vulnerabilities at scale recently, and while this may be true for these emerging frontier models, it's already a reality we live in today, and it's not just

Recently I have been building a lot of Windows Servers in different environments - one of the things I used to love to install as a system administrator was BGINFO.

The O.MG cable has been commercially available for a while now with a new version and some new firmware being released.

Every now and then I like to do a little bit of bug hunting in open source projects, I love the challenge, there might not be and often isn't anything significant but every now and again I find something interesting.

This is a story about an XSS vulnerability on a website for a popular UK restaurant chain which from this point forward I will simply refer to as "Shenanigan's".

Grumpy Admin here, yes it is me!

This is a fairly detailed blog post on the pain we went through to get Arbitrary File Read (CVE-2020-10560) in an open-source platform that involved writing a custom crypto cracking tool!.

For the last year, I have been the Director of Content for ImmersiveLabs.

As many of you know I have been in the DFIR realm now for just over 6 years and during that time have been very fortunate to attend many interesting and varied training courses, including SANS, De Montfort University, XRY and others.

Its been a few months since I wrote about my new project PasteHunter When I first wrote the app it was a fairly simple single threaded app that followed a simple work flow: Fetch list of pastes Fetch each paste Scan paste with yara Write to elastic search…

Hey All, Wow it been such a long time since I have blogged, this has made Grumpy Admin… well, Grumpy.

“Hello World” It seems like so long since I last posted I felt I should say hello again 🙂 As is always the case real life and work got in the way and my ability to blog became much diminished.

From a security analytics and Threat Intelligence perspective pastebin is a treasure trove of information.