Curtis Brazzell – Medium

Home

Following

Library

Reading history

Stories

Stats

Curtis Brazzell

Pinned

A Practical, AI-Generated Phishing PoC With ChatGPT

Intro

Apr 17, 2023

A Practical, AI-Generated Phishing PoC With ChatGPT

Apr 17, 2023

A Konami Code for Vuln Chaining Combos

Automate finding relational vulnerabilities for a more accurate risk rating

Nov 5, 2021

A Konami Code for Vuln Chaining Combos

Nov 5, 2021

You ain’t got no problem, Jules. I’m on the Multifactor.

Practical Bypasses for MFA with Poor Implementations

Jul 9, 2021

You ain’t got no problem, Jules. I’m on the Multifactor.

Jul 9, 2021

My KringleCon 2020 HolidayHack Writeup

Another Amazing Year of Challenges!

Jan 12, 2021

My KringleCon 2020 HolidayHack Writeup

Jan 12, 2021

Phishing Your Password Manager

Discovering and Exploiting a Common Flaw

Sep 25, 2020

Phishing Your Password Manager

Sep 25, 2020

One Part Steganography, Four Redirectors, and a Splash of C2!

Using QR Codes and Image Proxies for C2 Traffic

Sep 20, 2020

One Part Steganography, Four Redirectors, and a Splash of C2!

Sep 20, 2020

Proxying Exfil Data Through Images

Intro

Jul 18, 2020

Proxying Exfil Data Through Images

Jul 18, 2020

These Aren’t the Phish You’re Looking For

An Effective Technique for Avoiding Blacklists

May 25, 2020

These Aren’t the Phish You’re Looking For

May 25, 2020

Exploiting the Exploiters

A Case for Always Checking Source

Apr 26, 2020

Exploiting the Exploiters

Apr 26, 2020

A Simple Solution to Credential Stuffing

Feb 3, 2020

A Simple Solution to Credential Stuffing

Feb 3, 2020

2019 KringleCon Holiday Hack Write-up

My Holiday Hack Challenge Report

Jan 14, 2020

2019 KringleCon Holiday Hack Write-up

Jan 14, 2020

Getting Malicious Office Documents to Fire with Protected View

A Potential Bypass Technique

Nov 19, 2019

Getting Malicious Office Documents to Fire with Protected View

Nov 19, 2019

Bugs Wanted Dead or Alive

A New Approach to Responsible Disclosure for All

Oct 10, 2019

Bugs Wanted Dead or Alive

Oct 10, 2019

Vulnerability Remediation — Fight for the Users

Off the Grid

Sep 1, 2019

Vulnerability Remediation — Fight for the Users

Sep 1, 2019

One-Two Punch: Using AppSec to Up Your Pentests and Phishing Gigs

Let’s Get Ready to Rumble!

Jun 26, 2019

One-Two Punch: Using AppSec to Up Your Pentests and Phishing Gigs

Jun 26, 2019

Not Just a Vuln Scan — Are You Receiving/Providing Quality Security Assessments?

Intro

Jun 6, 2019

Jun 6, 2019

Fighting Alert Fatigue with Actionable Intelligence

By fine-tuning security system algorithms, analysts can make alerts intelligent and useful, not merely generators of noise.

May 10, 2019

May 10, 2019

PhishAPI Tool — Rapid Deployment of Fake Sites and Maldocs with Notifications!

Intro / TL;DR

May 10, 2019

PhishAPI Tool — Rapid Deployment of Fake Sites and Maldocs with Notifications!

May 10, 2019

From Grey to White — An Unspoken Ethical Journey in Cyber Security

Intro

May 10, 2019

From Grey to White — An Unspoken Ethical Journey in Cyber Security

May 10, 2019

My Bucket’s Got a Hole in it — Cloud Storage vs Security

Intro

May 10, 2019

My Bucket’s Got a Hole in it — Cloud Storage vs Security

May 10, 2019

Curtis Brazzell

Curtis Brazzell

Passionate geek for Information/Cyber Security! I’m always learning and am happy to contribute anything I can share with the community. Follow me @ Twitter!

Following

Help
Status
About
Careers
Press
Blog
Privacy
Rules
Terms
Text to speech