Oliver Morton
@grimhacker
Offensive Security R&D, Pen Tester. On my continuing mission to replace myself with a small script. He/Him https://infosec.exchange/@grimhacker
You might like
[Blog Post] Using mTLS with Chromium headless mode grimhacker.com/2025/09/30/mtl…
You might have seen our very talented photographer Dragan Butkovic taking photos as the official photographer for BSides Leeds. You can see these here - flic.kr/s/aHBqjBvt7d Dragan isn't on Twitter but is on mrxdragan.bsky.social
flickr.com
Flickr
BSides Leeds 2024
I had a great time at @BSidesLeeds 2024! It was a privilege to deliver a talk, and I hope everyone enjoyed it. As promised my slides are published here: grimhacker.com/presentations/ 😃
grimhacker.com
Presentations
Overview Occasionally I’ll write and deliver a presentation… this is where you can get the slides and I can find them in the future! Exploiting SNI SSRF to access the AWS IMDSv2 service…
Exploiting NGINXDay2022 Blog Post and Slides following my talk at @_dc151 😁 grimhacker.com/2022/05/22/ngi…
grimhacker.com
“NginxDay2022”: NGINX LDAP reference implementation Zero Day Vulnerability
A recent zero-day vulnerability has been publicly shared revealing a critical issue with the nginx-ldap-auth software package allowing attackers to potentially bypass authentication and disclose ke…
Thanks for some great and engaging talks tonight from @grimhacker and @danielperezcas8 !!! Lovely to see a good turnout too and see you all next month!
First up is @grimhacker with “NginxDay2022” - covering the recent Nginx auth ldap vulnerability; and discovery & exploitation thereof We then have @danielperezcas8 with “Internal phishing with Microsoft 365 Defender, and how catch some credentials"
🚨CALL FOR SPEAKERS!🚨 We have space for 2 speakers/demo’s on Weds 11th May in #Leeds. All options considered 😊 If you just want a platform to chat #security, present some work, demo some soft/hardware, or something else, we are open for speakers Get in touch via DM 🙏😊
SECURITY ADVISORY “NginxDay”: NGINX LDAP Reference Implementation Zero Day Vulnerability We have detailed the zero-day and relevant mitigation here: appcheck-ng.com/zero-day-vulne… #SecurityAdvisory #ZeroDay #NqinxDay
The best shot/chaser of all time
If you've ever wondered how you are supposed to react when you find out someone you know is trans and has transitioned, remember that Star Trek taught us exactly how.
[Tiny Blog Post] Fixing SQLAlchemy Postgres On Conflict Do Update "can't adapt type 'method'" grimhacker.com/2022/02/05/sql…
United States Trends
- 1. Kansas N/A
- 2. #WWERaw N/A
- 3. Isaiah Stewart N/A
- 4. Pistons N/A
- 5. Reaves N/A
- 6. Arizona N/A
- 7. Duren N/A
- 8. Allen Fieldhouse N/A
- 9. Hornets N/A
- 10. Bridges N/A
- 11. Peterson N/A
- 12. Bill Self N/A
- 13. Laravia N/A
- 14. Rock Chalk N/A
- 15. Caruso N/A
- 16. #kubball N/A
- 17. Ayton N/A
- 18. #TheRookie N/A
- 19. Flory Bidunga N/A
- 20. Jalen Williams N/A
You might like
Something went wrong.
Something went wrong.