~/log
Writing
Things I write about offensive security, cloud, Kubernetes, privacy and my own tools. Posts on other sites have a ↗.
-
Blog post publish test
This shall be a block post submitted via new vault feature
-
Colophon: how this site is built
Static HTML, no cookies, no trackers, and an encrypted notebook that doubles as my CMS.
-
Splitting an encrypted TiddlyWiki into a thousand opaque files
Why I replaced TiddlyWiki's whole-file encryption with one encrypted file per note, and what I learned along the way.
-
Puppet Assessment Techniques
Black- and whitebox techniques for assessing a Puppet Enterprise landscape: exposed status and Jolokia endpoints, CSR auto-signing, client-certificate header bypasses behind TLS termination, mass command execution after compromising the …