< Blog />
Offensive security, CTF, defense and privacy — notes by Dominique-Savio SAKOI (Dmod).
Welcome to my blog
Why this blog, and what you'll find here: CTF writeups, offensive and defensive security, privacy.
Read →TIL: an IP address can be written as a single number
23.94.145.93 and 392073565 point to the same machine. Malware uses this to slip past URL filters.
Read →I secured my own domain: from an F to an A+
HTTP headers, HSTS, a strict CSP, DNSSEC, CAA, DMARC: the logbook of hardening sakoi-cyber.me, and what each setting actually protects.
Read →Anatomy of a ClickFix campaign: when the victim launches the malware
Analysis of a real infection chain where no vulnerability is exploited: the user pastes the command themselves. From a fake CAPTCHA to a Chrome key stealer, eight layers built to blind each defense one by one.
Read →Inside Hydra, episode 1: detecting an attack never seen before
How Neuro-Sentinel, Hydra's defensive core, spots an intrusion it has no signature for — by first learning what a healthy network looks like.
Read →My privacy stack, tool by tool
The tools I use every day to reduce what I expose, encrypt what I keep, and never hand a service more than it needs — with the reasoning behind each choice.
Read →Writeup: JWT algorithm confusion (RS256 → HS256)
How to turn a public key — meant to be shared — into a signing key, and forge an admin token. A classic bug that's still very much alive.
Read →No article matches this search.
A new article now and then
Writeups, malware analysis, privacy. No tracking, no reselling, one click to unsubscribe.
E-mail handled by Buttondown · or via RSS, without an e-mail address.