Master Linux File Permissions and File Types While Your Coffee Brews
Linux Permissions and File Types Explained by Infographic and Exercises. Perfect for Your Morning Coffee Read.
NedTechie
NedTechie
/
Blog
Deep dives into cloud security, infrastructure & DevOps
Practical engineering articles on Linux, AWS, penetration testing, and the tools that keep modern systems running.
15
Articles
21
Topics
Featured
How Two curl Commands Gave Me Full Access to an S3 Bucket
A routine API pentest revealed that AWS Cognito Identity Pools were handing out S3 credentials to anyone on the internet. Here is how I found it, what I got wrong along the way, and the step-by-step fix.
Latest Articles
View all
I Wrote Ruby and the Compiler Made It 10x Faster
I wrote a log analyzer in Ruby. Then I compiled it to a native binary. It ran 10 times faster than the same algorithm in CRuby, and 3 tim...
Your S3 Bucket Is an Open Directory and You Probably Don't Know It
One curl command can enumerate every file in your S3 bucket. No credentials. No login. Just an HTTP GET. Here is how to find it, why it m...
Breaking My Own Infrastructure: 12 Days, 19 Findings, 3 False Positives
Twelve days ago I opened a terminal, pointed curl at our staging API, and started breaking things. I didn’t have a plan. I didn’t have a ...
What --dryrun Taught Me About Confidence
I shipped a false positive to my team. In bold. With a CRITICAL severity tag. And I was wrong. Not “wrong about a detail” wrong. Wrong a...
The Load Balancer That Trusted Everyone
Rate limiting is supposed to stop brute-force attacks. Ours didn’t. Not because the rate limiter was broken – it worked perfectly. The pr...
I Can Read Everyone's Invoices (and Found a Backdoor Inside)
I was testing my own finance records. Checking that the API returned the right data for my user. Standard BOLA test – try accessing someo...
The Refresh Token That Wouldn't Die
I logged out. Then I used my old refresh token. It still worked. I used it again. Still worked. Five times. Ten times. A week later. Sti...
It's 3 AM and I'm Creating a Thousand Invoices
I wasn’t supposed to be awake at 3 AM. But I’d had too much coffee and my brain wouldn’t shut off, so I figured I’d do one more test befo...