Medium

Curtis Brazzell

Pinned

In

InfoSec Write-ups

by

Curtis Brazzell

·

May 10

How I Defeat Passkeys Nearly Every Time

AiTM Phishing FIDO2 MFA

How I Defeat Passkeys Nearly Every Time

In

InfoSec Write-ups

by

Curtis Brazzell

·

Apr 6

Using Cloudflare’s Post-Quantum Tunnel to Protect Plex Remote Access on a Synology NAS

Future-proofing Plex traffic in transit, avoiding public port exposure, and letting modern clients use PQC with TLS 1.3 fallback for…

Diagram showing Plex Media Server on a Synology NAS connecting to a Dockerized cloudflared tunnel, then to Cloudflare edge, and finally to remote Plex clients using PQC when supported or TLS 1.3 fallback otherwise.

Curtis Brazzell

·

Apr 17, 2023

A Practical, AI-Generated Phishing PoC With ChatGPT

Intro

A Practical, AI-Generated Phishing PoC With ChatGPT

Curtis Brazzell

·

Nov 5, 2021

A Konami Code for Vuln Chaining Combos

Automate finding relational vulnerabilities for a more accurate risk rating

A Konami Code for Vuln Chaining Combos

Curtis Brazzell

·

Jul 9, 2021

You ain’t got no problem, Jules. I’m on the Multifactor.

Practical Bypasses for MFA with Poor Implementations

You ain’t got no problem, Jules. I’m on the Multifactor.

Curtis Brazzell

·

Jan 12, 2021

My KringleCon 2020 HolidayHack Writeup

Another Amazing Year of Challenges!

My KringleCon 2020 HolidayHack Writeup

Curtis Brazzell

·

Sep 25, 2020

Phishing Your Password Manager

Discovering and Exploiting a Common Flaw

Phishing Your Password Manager

Curtis Brazzell

·

Sep 20, 2020

One Part Steganography, Four Redirectors, and a Splash of C2!

Using QR Codes and Image Proxies for C2 Traffic

One Part Steganography, Four Redirectors, and a Splash of C2!

Curtis Brazzell

·

Jul 18, 2020

Proxying Exfil Data Through Images

Intro

Proxying Exfil Data Through Images

Curtis Brazzell

·

May 25, 2020

These Aren’t the Phish You’re Looking For

An Effective Technique for Avoiding Blacklists

These Aren’t the Phish You’re Looking For

Curtis Brazzell

Curtis Brazzell

Passionate geek for Information/Cyber Security! I’m always learning and am happy to contribute anything I can share with the community. Follow me @ Twitter!

Following

Help

Status

About

Careers

Press

Blog

Store

Privacy

Rules

Terms

Text to speech