Christophe Tafani-Dereeper

• Jan 22, 2018 Insomni’hack 2018 CTF teaser write-up
• Jan 18, 2018 Bypassing Cloudflare using Internet-wide scan data
• June 18, 2017 Abusing the AWS metadata service using SSRF vulnerabilities
• June 16, 2017 SickOs 1.2 write-up
• June 5, 2017 Set up your own malware analysis lab with VirtualBox, INetSim and Burp
• Apr 8, 2017 SickOs 1.2 write-up
• Apr 6, 2017 Vulnix write-up - playing around with NFS
• Apr 4, 2017 Mr Robot write-up
• Jan 20, 2017 Droopy v0.2 write-up
• Nov 27, 2016 Git bisect for the win

CloudFlair

Find origin servers of websites behind by CloudFlare using Internet-wide scan data from Censys

duplicacy-autobackup

Painless automated backups to multiple storage providers with Docker and duplicacy

censys-subdomain-finder

Subdomain enumeration using the certificate transparency logs from Censys

firepwned

Checks Firefox saved passwords against known data leaks

nmap-nse-info

A tool to browse and search nmap's NSE scripts

docker-python-sandbox

Execute untrusted python code in Docker containers created on the fly

Technical books I particularly enjoyed reading and learning from.

• Hacking, the Art of Exploitation
• Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software
• Building Microservices: Designing Fine-Grained Systems
• Violent Python

Quotes I find inspiring. Taken from a book, a movie, a reddit post, a blog post, or an overheard conversation.

• «  Not every problem is a nail, and not every solution a hammer  »
• «  Under-promise and over-deliver  »