Hall of Cool Things
A running list of things I think are worth knowing about, talks I’ve given, blog posts I’ve written and tools/solutions I’ve either developed or helped develop.
Presentations
| [Presentation] | BlackHat MEA — Persistence or Snake-oil: Re-achieving Persistent XSS |
| [Presentation] | BSides CapeTown 2025 — Persistence or Snake-oil: Re-achieving Persistent XSS |
| [Presentation] | BSides CapeTown 2024 — Breaking the Barrier: Exploring modern WAFs |
Blog Posts
| [Blog] | Persistence or Snake-oil: Re-achieving Persistent XSS Part 1 — Part 1 of my XSS Persistence Research |
| [Blog] | Persistence or Snake-oil: Re-achieving Persistent XSS Part 2 — Part 2 of my XSS Persistence Research |
| [Blog] | Breaking the Barrier: Exploring modern WAFs — Moden WAF Bypass Research |
Tools & Resources
| [Solution] | NoScope — The TryHackMe NoScope pentesting agent |
| [Tool] | BRAT — Browser remote access tool, C2 style tool but for XSS |