Breaking Javascript with Python Pickles (Solving brinebid in DEFCON CTF Qualifiers 2023)

Recap of the DEF CON 32 Adversary Village panel 'Red Teaming is Broken' with experts from MITRE, Google, AWS and Sentry on making red team exercises more effective, focused and cost-efficient.

Washi publishes his Flare-On 12 write-ups, reflecting on the challenge set — praising it as fun but wanting more realistic, malware-oriented tasks — with links to the full solutions.

A personal update from Washi: highlights from DEFCON 33 and a first visit to the Grand Canyon, plus an honest account of ongoing Long-COVID-like health issues limiting his work.

Despite half a year of health setbacks, Washi still placed 16th in Flare-On 11 and shares links to his full write-up archive covering all challenges, including the toughest ones.

A walkthrough of solving ra1n's BinaryShield crackme, featuring a custom virtual-machine obfuscation: building a disassembler, reversing opcode handlers, devirtualizing the code and solving it.

A customer story on how Burp AT, Burp Suite's agentic testing capability, helped Orange Cyberdefense analyst Ray Huygen work through 66,000 lines of minified JavaScript to find a critical access flaw that exposed confidential whistleblower reports, and turn the finding into a confirmed exploit.