Piotr Duszyński - Personal Bloghttps://duszynski.eu/https://duszynski.eu/posts/tor-ip-disclosure-through-http-301-cache-poisoning/https://duszynski.eu/posts/tor-ip-disclosure-through-http-301-cache-poisoning/This blog post describes an example practical application of the 'HTTP 301 Cache Poisoning' attack that can be used by a malicious Tor exit node to disclose real IP address of chosen clients.Wed, 29 May 2019 09:00:00 GMThttps://duszynski.eu/posts/domain-hijack-through-http-301-cache-poisoning/https://duszynski.eu/posts/domain-hijack-through-http-301-cache-poisoning/This blog post describes an interesting technique of abusing the standard HTTP 301 responses ("Permanent redirect") to poison browser cache and achieve endpoint persistence for chosen non-TLS resources.Thu, 23 May 2019 09:00:00 GMThttps://duszynski.eu/posts/client-domain-hooking-in-practice/https://duszynski.eu/posts/client-domain-hooking-in-practice/In my last blog post I have released a paper that described all relevant technical aspects of the 'Client Domain Hooking', along with a HTTP Strict Transport Security (HSTS) survey made for the TOP 1000 Alexa websites.Mon, 20 May 2019 09:00:00 GMThttps://duszynski.eu/posts/hijacking-browser-tls-traffic-through-client-domain-hooking/https://duszynski.eu/posts/hijacking-browser-tls-traffic-through-client-domain-hooking/I am releasing a paper that describes a new variation of a man-in-the-middle (MITM) technique which, under certain circumstances, allows to permanently hijack browsers encrypted HTTP communication channel flow and compromise its confidentiality and integrity.Wed, 08 May 2019 09:00:00 GMThttps://duszynski.eu/posts/phishing-ng-bypassing-2fa-with-modlishka/https://duszynski.eu/posts/phishing-ng-bypassing-2fa-with-modlishka/This blog post is an introduction to the reverse proxy "Modlishka" tool, that I have just released.Wed, 02 Jan 2019 09:00:00 GMT