// offensive & defensive security · notes from the field
Joel's Cybersecurity Journey
Notes from the field by Joel Chang, Senior Security Engineer — offensive & defensive security, vulnerability research, CTF writeups and HTB walkthroughs.
Latest writeups
-
Post Exploitation of VCenter
Post exploitation on VMWare VCenter server …
-
Exploiting Jenkins
A story of how a wild Jenkins API token led to so much more ….
-
Creating Customized Windows Reverse Shell Payloads
A simple and quick guide to generating Windows reverse shell payloads ….
-
SQL Injections
A tale of how improper access control and SQL Injection leaked out PIIs. For starters, many may be wondering “SQL Injection?! Is this for real?” The answer to that is Yes, you...
-
Mobile Security
Well, it’s been quite some time since my last post and recently I’ve been very much involved in doing mobile security and here comes my take on some of the (extremely) common...