#k8s You can get all services by querying SRV records on *.*.svc.cluster.local. Useful for lateral movement. github.com/kabachook/k8s-…

BTW check out my research on #k8s security. Default open ports, TLS checklists and other notes. Also some attacks included🤗 github.com/kabachook/k8s-…

Node.js development in 2019

4th place with my team on RuCTFE!

Sad reality of 2FA: Something you know + something you forgot at home or your 2fa sms got hijacked, bc service doesn’t support TOTP or you lost your phone Hope Webauth with hardware keys will conquer the world

First Web Village talks are known! JavaScript bugs by Maxim Prokopovich juwilie and Danil Beltyukov Danil Beltyukov Speakers will show typical mistakes of developers and discuss other researchers’ high-profile findings. Learn more: zeronights.ru/en/news-en/fir…