$ ls ./publications
Blog & Publications
Articles, research notes, and writeups on cybersecurity, ethical hacking, penetration testing, and attack surface management.
Mapping the External Attack Surface of an Enterprise: a Practical Approach
A walkthrough of the methodology used in Attack Surface Management engagements, from asset discovery to risk prioritization.
Burp Suite Extensions I Use in Every Web Application Pentest
A curated list of Burp Suite plugins that save time and improve coverage during web application security assessments.
Side-Channel Attacks on Embedded Hardware: Power Analysis Fundamentals
An introduction to Differential Power Analysis (DPA) and Correlation Power Analysis (CPA) targeting AES-128 on ARM Cortex-M microcontrollers.