programming / security / research
/fərst/ · adjective
f1rst is a research-oriented blog documenting my journey through programming, cybersecurity, and all things tech. It serves as a learning archive — a place where experiments, technical deep-dives, and breakthroughs are captured and shared.
The console behind the recruitment kit in part one ships onboarding material for its customers, increments a build constant and shares its code, its services and its configuration variables with a phishing operation documented in September 2023 as RedLungfish. This is what the capture record and the panel build support.
Read the postArchive
f1rst 13 min read 1 parts
Some writeup for a mobile challenge on Hack The Box Lab.
f1rst 76 min read 8 parts
Some writeup for a web challenge on Hack The Box Lab.
f1rst 16 min read Technical analysis of a live General Motors careers phishing deployment and the kit behind it: cloned brand pages, a collection form, a fake identity provider, and a Socket.IO console that lets an operator steer the victim. 245 captures across 108 registrable domains, with detection opportunities and indicators.
Topics