SIP - The Session Initiation Protocol (RFC 3261)
How SIP (RFC 3261) sets up, modifies, and tears down multimedia sessions using a text request/response model, its elements, layered design, transactions, dialogs, and security.
2026, Jul 20 —- Posts
- Categories
PCI PTS POI v7.0 — Securing the Payment Terminal at the Point of Interaction
A technical walkthrough of the PCI PTS POI Modular Security Requirements v7.0, the standard that governs payment terminals, from tamper resistance and PIN protection to account-data encryption, wireless security, and third-party applications.
2026, Jul 20 —PCI PTS HSM v4.0 — How Payment Hardware Security Modules Are Evaluated
A technical walkthrough of the PCI PTS HSM Modular Security Requirements v4.0, the standard that defines how payment Hardware Security Modules are evaluated, from tamper resistance and key separation to cloud multi-tenant isolation.
2026, Jul 20 —The IPsec and IKE Document Roadmap (RFC 6071)
A guided tour of RFC 6071, the roadmap that maps the sprawling IPsec and IKE RFC landscape - the seven document groups, IPsec-v2 vs v3, IKEv1 vs IKEv2, extensions, and crypto requirement levels.
2026, Jul 20 —HOTP - An HMAC-Based One-Time Password Algorithm (RFC 4226)
How HOTP (RFC 4226) turns a shared secret and a counter into a 6-digit one-time password using HMAC-SHA-1 and dynamic truncation, with its security analysis, validation rules, and link to TOTP.
2026, Jul 20 —The Chinese Wall Security Policy - Brewer and Nash Model
A formal walkthrough of the Brewer and Nash Chinese Wall security policy, its conflict-of-interest access rules, its *-property against indirect flows, and why it cannot be reduced to Bell-LaPadula.
2026, Jul 20 —Three Vulnerabilities from the OpenZeppelin Stellar Contracts Audits
A technical walkthrough of three real, resolved findings from the OpenZeppelin Stellar Contracts audits — silent supply inflation via self-recovery, signer aliasing through non-canonical keys, and a ledger-arithmetic TTL underflow — each with the vulnerable code, a flow diagram, and the fix.
2026, Jul 10 —Insuring Composable DeFi - First-Loss Capital Along the Attack Graph
How to insure composable DeFi more efficiently by placing first-loss capital along the attack graph (bridges, oracles, signers) instead of only at protocol endpoints.
2026, Jul 02 —Windows Domain Persistence - Golden Tickets and the Skeleton Key
How an attacker who already controls a Domain Controller keeps coming back - the Golden Ticket forged from the krbtgt key and the Skeleton Key LSASS backdoor, with detection and mitigation.
2026, Jun 30 —Windows Credentials Protection - LAPS, WDigest, LSA Protection, Credential Guard and Protected Users
How Windows protects credentials at rest and in memory - password policy, LAPS, logon types, disabling WDigest, LSA Protection (RunAsPPL), Credential Guard (VBS), and the Protected Users group.
2026, Jun 30 —Windows Advanced Authentication - Smartcards, Virtual Smartcards and Hello for Business
How Windows replaces passwords with smartcards, TPM-backed virtual smartcards and Windows Hello for Business, the Kerberos PKINIT flow behind them, and why NTLM and ticket theft still apply.
2026, Jun 30 —Linux Isolation Primitives - Defense in Depth Beyond the Castle Model
A technical survey of Linux isolation primitives (mount options, chroot, netfilter, cgroups, namespaces) and how they compose into containers, hypervisors, and Qubes OS as defense in depth.
2026, Jun 29 —GNU/Linux Base Security Primitives - Authentication, Permissions, ACLs, Attributes, Capabilities
A technical walkthrough of the base GNU/Linux security primitives - login and authentication, POSIX file permissions, ACLs, extended attributes, and capabilities - with their adversary models and trade-offs.
2026, Jun 29 —GNU/Linux from the Adversary's Side - Buffer Overflows, the Boot Chain, and a Real Attack
Testing GNU/Linux security by bypassing its primitives - stack buffer overflows and their mitigations, the boot chain under a physical adversary, and a remote attack from web exploit to root.
2026, Jun 29 —Advanced GNU/Linux Security - SECCOMP and Linux Security Modules (LSM)
How SECCOMP filters system calls and how Linux Security Modules (SELinux, AppArmor, and others) add mandatory access control on top of the base UNIX permission model.
2026, Jun 29 —Zero-Knowledge Proof Vulnerabilities — A Technical Classification of Soundness, Completeness, and Protocol Failures
A formal technical classification of zero-knowledge proof vulnerabilities covering trusted setup failures, Fiat-Shamir binding errors, under-constrained witnesses, proof verification bypasses, and protocol-level boundary gaps.
2026, Jun 19 —How Zero-Knowledge Proofs Get Hacked — Explained for a 10-Year-Old
A simple guide to the main ways zero-knowledge proof systems have been broken, explained with everyday analogies about magic locks, bakers, and inspectors.
2026, Jun 19 —Zero-Knowledge Proof Hacks — A Documented Record of Exploits and Vulnerabilities (2023–2026)
A chronological record of confirmed hacks, disclosed vulnerabilities, and bug bounties in zero-knowledge proof protocols from 2023 to 2026, with technical root cause analysis for each incident.
2026, Jun 19 —Zero-Knowledge Proof Failures in Cross-Chain Bridges — Exploits, Vulnerabilities, and Bug Bounties
An analysis of security incidents in ZK-rollup bridges from 2023 to 2026, covering confirmed exploits, circuit-level vulnerability disclosures, and bug bounties targeting ZK withdrawal and settlement mechanisms.
2026, Jun 19 —Hash Time-Locked Contracts — From First Principles to Garden Finance's Cross-Chain Bridge
A deep-dive into Hash Time-Locked Contracts (HTLCs) - how they work cryptographically, how Garden Finance uses them for a trustless Bitcoin bridge, and the threat model behind the protocol.
2026, May 11 —Soroban State Archival — Storage Semantics and Security Implications
A deep dive into Soroban's three storage types, TTL mechanics, and the Protocol 23 auto-restoration model — with a focus on how archival semantics affect smart contract security analysis.
2026, Apr 15 —Integrating Pyth Network Price Feeds — A Security-Focused Guide
Learn how to integrate Pyth Network pull oracle price feeds in Solidity and Solana programs, with a deep focus on security pitfalls — staleness, confidence intervals, fixed-point math, and adversarial selection.
2026, Mar 13 —Fuzzing Solana Programs with Trident
Learn how to use Trident, the Rust-based fuzzing framework for Anchor programs on Solana. Covers fuzzing fundamentals, test structure, instruction construction, invariant checking, and execution.
2026, Mar 13 —Solidity Modifier Patterns: Gas, Bytecode Size, and Security Trade-offs
A technical comparison of Solidity modifier patterns — inline, wrapped function, and no-modifier — analyzing gas costs, bytecode size impact, auditability, and conventions across major codebases.
2026, Feb 18 —Nonce Management and CREATE2 in ERC-4337 Smart Wallets
Understanding the dual nonce system in ERC-4337 smart wallets, the differences between CREATE and CREATE2 for contract deployment, and the pitfalls encountered with EIP-7702 delegation.
2026, Feb 17 —EIP-7702 Smart Wallet Security: Threat Model and Attack Surface Analysis
A practical security analysis of EIP-7702 smart wallets covering initialization front-running, access control, signature replay, dual nonce systems, and residual risks inherent to EOA code delegation.
2026, Feb 17 —ERC-1271 and ERC-7913 Signature Verification — OpenZeppelin, Solady, Coinbase Smart Wallet, and Solarity Solidity Library
A technical comparison of ERC-1271 and ERC-7913 signature verification across OpenZeppelin v5.5.0, Solady v0.1.26, Coinbase Smart Wallet v1.1.0, and Solarity solidity-lib v3.3.2. Covers architecture, features, gas, and selection criteria.
2026, Feb 13 —Security in Claude Code: Architecture, Safeguards, and Best Practices
technical overview of Claude Code’s security model, including its permission system, sandboxing architecture, identity and access management (IAM), and operational best practices.
2026, Jan 13 —Solana Staking - Overview
Staking in Solana is the process of locking SOL tokens in a stake account to...
2025, Nov 09 —Security of Cryptocurrency Exchanges - Overview"
Cryptocurrency exchanges play a pivotal role in the digital asset ecosystem, serving as platforms for on-ramp, trading, storing, and converting cryptocurrencies. As central nodes in a highly valuable and rapidly evolving industry, these exchanges are frequent targets for cyberattacks and financial fraud.
2025, Nov 06 —Blockchain wallets on AWS with Fireblocks and Circle
Deep dive into blockchain wallets with Circle and Fireblocks and explore how they use AWS services such as AWS Nitro Enclave
2025, Jul 29 —AWS Nitro Enclaves: Secure and Isolated Compute for Sensitive Data
AWS Nitro Enclaves, a feature of Amazon EC2, aims to offer highly isolated and secure execution environments.
2025, Jul 17 —Lattice-Based Cryptography - The Short Integer Solution (SIS) Problem
Short integer solution (SIS)is an average-case problems used in lattice-based cryptography constructions. SIS is one of the problems believed to be hard even for quantum computers.
2025, Apr 23 —AI security and threats
Artificial Intelligence(AI) and Machine Learning Models bring with them a range of new challenges and security concerns. From the creation of realistic deepfakes to vulnerabilities like prompt injection and the use of Shadow AI systems inside an organization.
2025, Jan 22 —Main Security Models - Overview
This article provides a comprehensive overview of three foundational security models: Bell-LaPadula, Biba, and Clark-Wilson.
2025, Jan 15 —Digital Forensics and Incident Response (DFIR) - Introduction
DFIR stands for **Digital Forensics and Incident Response**. This field covers the collection of forensic artifacts from digital devices such as computers, media devices, and smartphones to investigate an incident.
2025, Jan 15 —Hardware Security - Understanding Fault Injection Attack
Fault injection attack (FIA) is a technique that targets the hardware itself to create unexpected behaviors in systems, often with catastrophic consequences.
2024, Dec 30 —Mutual TLS (mTLS) - Overview
Mutual TLS (mTLS) is an extension of the standard TLS protocol which requires both the client and server to present and validate certificates, enabling mutual authentication.
2024, Dec 16 —The Pyramid of Pain in Cybersecurity
The Pyramid of Pain visually organizes six types of indicators used to detect and mitigate cyber threats, illustrating how targeting each type of indicator affects the attacker’s ability to operate.
2024, Nov 28 —Trezor Crypto Wallet – Cryptography and Security
This article presents the different types of crypto wallets (hot, warm, cold) and their associated risks
2024, Oct 15 —Solana Programs - Basic Security with Anchor
Basic Security tips to write Secure Solana Programs, based on School of Solana Season 5 by Ackee Blockchain Security
2024, Aug 20 —Code4Arena Contest - Dyad Stablecoin Liquidation
This article presents the liquidation function from the Dyad Stablecoin made during the code4Arena contest
2024, May 02 —2022 - Hacktober in DeFi
This article summarizes the main hacks that took place during the month of October 2022 in the DeFi ecosystem.
2022, Dec 11 —Recover your passwords with Hashcat
Hashcat is a security tool allowing to recover passwords form a hash on a large number of hash functions (md5, sha1, sha256)
2022, Nov 13 —XSS Game - Google
XSS-game was launched by Google to train for XSS vulnerabilities with 6 challenges to solve. This document summarizes the solutions for challenges 1 to 5.
2022, Nov 12 —Encrypt a USB key on Windows with Bitlocker
This article details how to encrypt a USB drive on Windows with Bitlocker, an encryption tool offered by Windows.
2022, Oct 06 —Forensic analysis on a disk image (dd)
Presentation of a list of tools to perform a forensic analysis on a disk image (minfo, fls, mount, photorec, ...).
2022, Sep 16 —Le protocole WEP et ses vulnérabilités
Cet article présente le protocole Wifi WEP (Wired Equivalent Privacy) en se focalisant sur les aspects sécuritaires (confidentialité, intégrité, authenticité).
2022, Apr 28 —La sécurité du protocole Telnet
Cet article présente un test d'intrusion sur le protocole telnet afin de sensibiliser le lecteur aux différentes vulnérabilités possibles pour qu'il s'en prémunisse.
2022, Feb 05 —WAH10 - Back-End Components
Questions & Réponses du chapitre 10 du livre The Web Application Hacker's Handbook
2022, Feb 03 —WAH18 - The Application Server
Questions & Réponses du chapitre 18, Attacking the Application Server, du livre The Web Application Hacker's Handbook
2022, Feb 03 —WAH11 - Application Logic
Questions & Réponses du chapitre 11, Attacking Application Logic, du livre The Web Application Hacker's Handbook
2022, Feb 03 —DVWA - Challenge Login avec Hydra
Pourquoi est-il important d'employer des mots de passes forts ? Illustration à travers l'exemple de l'application vulnérable DVWA.
2021, Nov 13 —Test d'intrusion sur un HTTP File Server
Présentation d'un test d'intrusion sur une ancienne version de HTTP File Server afin de sensibiliser le lecteur aux différentes vulnérabilités possibles pour qu'il s'en prémunisse.
2021, Nov 01 —Test d'intrusion sur un serveur Apache Tomcat
cet article présente un test d'intrusion sur une ancien version d'un serveur apache tomcat afin de sensibiliser le lecteur aux différentes vulnérabilités possibles pour qu'il s'en prémunisse.
2021, Oct 19 —Les tests d'intrusion (pentesting)
Cet article introduit le concept de test d'intrusion (pentesting)
2021, Oct 17 —SSH - accéder à distance à un shell
Cet article présente comment accéder à distance à un shell ainsi que la mise en place d'une connexion sécurisée entre un client et un serveur.
2021, Oct 14 —Vulnérabilités avec le langage C
Cet article présente une liste de vulnérabilités (CWE 121, CWE 122, etc.) et menaces potentielles avec le langage C afin de sensibiliser les programmeurs.
2021, Jun 22 —WPA en bref
Cet article résume les principaux points du protocole WPA, notamment la génération des clés, le contrôle d'intégrité avec MIC et la confidentialité avec TKIP
2021, Jun 15 —Mimikatz - afficher les logs
Afficher les logs de Mimikatz sur Windows grâce à l'event viewer
2021, May 18 —Analyse de programmes avec GCC et GDB
Compilation avec gcc et commandes de base de GDB
2021, May 18 —Metasploit - Elévation de privilège avec migrate
Cet article présente la commande Meterpreter migrate du logiciel Metasploit. Celle-ci permet à un attaquant d'élever ses privilèges sur la machine après qu'il ait pu obtenir dessus une session meterpreter.
2021, May 16 —Introduction à Klee, dynamic symbolic execution engine
Présentation du logiciel Klee ainsi que ses tutoriels. Klee est un outil permettant de réaliser une analyse concolique.
2021, May 11 —