darkport

Hello! I'm Paul Price.

I make stuff, break stuff, and protect stuff from getting hacked.

Find me on Twitter and GitHub.

From the blog

Effortless Password Audits 1 Nov '18
Why you should be auditing your users passwords.
Online Stalking: London, Paris, New York 13 Feb '18
Abusing seemingly innocent data.
Domino's: Pizza and Payments 4 Apr '16
pizza.free = true
Owning Philips In.Sight IP Cameras 30 Jan '15
Poppin' root shells on Internet-enabled cameras.
Yoics: account takeover vulnerability 29 Jan '15
Full account takeover in an IoT cloud provider used by numerous manufacturers such as Cisco and Phillips.
Moonpig Vulnerability 5 Jan '15
Unauthenticated API endpoints exposed personal and financial details of 3 million customers.

Passlo
Helps businesses protect against the number one cause of data breaches.
shhgit
Find GitHub secrets in real time.
Bucket Stream
Find interesting Amazon S3 Buckets by watching certificate transparency logs.
cracke-dit
Easier Active Directory password audits!
The Endorser
OSINT tool to pluck out LinkedIn relationships via endorsements.
Needl
Generates fake genuine-looking Internet traffic.

5 Apr '16 Motherboard (VICE) - Bug in Domino's Pizza App Allowed Hackers to Get Free Pizza for Life
6 Jan '15 The Guardian, BBC - Personal details of all MoonPig customers exposed by security bug