Menu

bit.therapy

-.-

IceCTF: Analyzing PCAPs and reversing encryption

IceCTF started a little while a go and we got a team together to try and grab some of these flags. If you're doing the challenges »

A look at Zepto Ransomware - Payload delivery analysis

It's another quiet Friday when we are alerted of bunch of files with the .zepto extension being created all over the place. It seems that a »

Creating your own US Netflix proxy with Google Cloud

Say you wanted to create your own Unblock-Us or Tunlr service... maybe for educational purposes or maybe because Netflix is starting to block access from VPN »

Walking through Angler Exploit Kit - Payload delivery analysis

A few days ago I was alerted of a potentially compromised website serving Angler EK: hxxp://www.stadiumseatingcharts.com/rogers-centre/ The Angler exploit kit will redirect »

A trick to bypass an XSS filter and execute JavaScript

I've recently come across an application which had a very simple XSS filter: Bad chars: ( ) < > Simple, but annoying. I found a stored XSS vulnerability »