Archive

Some public things I did before 2026.

• gcp-sa-key-checker: A recon tool for GCP Service Account Keys - GitHub
• “A CSP Compliant non-blocking script loader”
• Danny Cooper & Allan Wirth - Homeward Bound: Scanning Private IP Space with DNS Rebinding
• GPSDetect - a Firefox addon for passively detecting GPS Exif information in JPEGs
• heapsort.me - A simple utility for manually heap sorting a list of items
• CPU cache size measurement tool - An example for measuring cpu cache size client side in Javascript
• HPHPc in Docker - A docker container for running Facebook’s PHP to C++ compiler
• SVG SSRF cheatsheet - A cheatsheet for various SVG based SSRF methods