Stealing Bitcoin w/ CSRF via Ride The Lightning + Umbrel. Thanks to the RTL devs for pushing a quick fix! Here's my write-up: initblog.com/2021/rtl-driveb…

Found a neat little Firefox for Android bug. Current version is not vulnerable, please make sure you are up to date. :) gitlab.com/gitlab-com/gl-sec…

Here's the talk I was scheduled to give at BSides Melbourne. It's an intro to post-exploitation for environments hosted in Google Cloud. Sorry I couldn't deliver in person, but maybe folks new to attacking or defending GCP will find it useful: vimeo.com/398433125

cloud_enum: Enumerate public resources in AWS, Azure, and GCP. It's in early phases but still perfectly usable for some nice OSINT. I'll keep adding modules as time permits. Hope you enjoy! #osint #pentest github.com/initstring/cloud_…