corpus.blog
41554 blogs · [ { "id": "01a08737-955b-7102-a6d2-81c393011a76", "title": "Unofficial Smart Chef kitchen scale webapp", "url": "https://bburky.com/#smartchef", "published_at": "2025-08-15T00:00:00+00:00" }, { "id": "01a08737-955b-7102-a6d2-81c393f105c2", "title": "Keycloak verify existing account by email could be performed with a spoofed email", "url": "https://bburky.com/#keycloak-first-broker", "published_at": "2025-07-08T00:00:00+00:00" }, { "id": "01a08737-955b-7102-a6d2-81c3947f2ab3", "title": "MinIO Operator used Kubernetes apiserver audience for AssumeRoleWithWebIdentity STS", "url": "https://bburky.com/#minio-operator-audience", "published_at": "2025-04-21T00:00:00+00:00" }, { "id": "01a08737-955b-7102-a6d2-81c394adeefd", "title": "Missing authorization check on cross repository blob mount in multiple open source container registries", "url": "https://bburky.com/#missing-cross-repository-blob-mount-authorization-check", "published_at": "2024-07-09T00:00:00+00:00" }, { "id": "01a08737-955b-7102-a6d2-81c39589e563", "title": "Overly permissive IAM policy in github-aws-runners/terraform-aws-github-runner", "url": "https://bburky.com/#terraform-aws-github-runner-GHSA-w423-qwm2-w2jq", "published_at": "2024-07-01T00:00:00+00:00" }, { "id": "01a08737-955b-7102-a6d2-81c395af9d59", "title": "San Antonio BSides CTF 2024", "url": "https://bburky.com/#bsides-ctf", "published_at": "2024-06-08T00:00:00+00:00" }, { "id": "01a08737-955b-7102-a6d2-81c3965e8622", "title": "Kyverno policy bypass using Kubernetes finalizers", "url": "https://bburky.com/#kyverno-deletiontimestamp", "published_at": "2023-06-01T00:00:00+00:00" }, { "id": "01a08737-955c-7124-b893-e164b6ccbc13", "title": "Playlist Extension for Playnite", "url": "https://bburky.com/#playnite-playlist", "published_at": "2021-09-12T00:00:00+00:00" }, { "id": "01a08737-955c-7124-b893-e164b7c6a98f", "title": "Inject Steam GameOverlayRenderer DLL with Frida", "url": "https://bburky.com/#inject-steam-game-overlay-renderer-dll-into-a-game-with-frida", "published_at": "2021-08-16T00:00:00+00:00" }, { "id": "01a08737-955c-7124-b893-e164b831e11b", "title": "Proof of concept SECCOMP_RET_USER_NOTIF based Frida Syscall Tracer", "url": "https://bburky.com/#seccomp-ret-user-notif-based-frida-syscall-tracer", "published_at": "2021-06-26T00:00:00+00:00" }, { "id": "01a08737-955c-7124-b893-e164b8511957", "title": "Buildah/Podman chroot isolation: environment value leakage to intermediate processes", "url": "https://bburky.com/#buildah-GHSA-7638-r9r3-rmjj", "published_at": "2021-06-15T00:00:00+00:00" }, { "id": "01a08737-955c-7124-b893-e164b8b4b117", "title": "Offline Kubernetes manifest diff (does not use cluster state)", "url": "https://bburky.com/#offline-kubernetes-manifest-diff-does-not-use-cluster-state", "published_at": "2021-05-21T00:00:00+00:00" }, { "id": "01a08737-955c-7124-b893-e164b8f2b177", "title": "EPUB full text search using SQLite FTS5", "url": "https://bburky.com/#epub-full-text-search-using-sq-lite-fts-5", "published_at": "2021-05-17T00:00:00+00:00" }, { "id": "01a08737-955c-7124-b893-e164b9c8f5f5", "title": "Function hooking example using avr-gdb's built-in simulator and Python", "url": "https://bburky.com/#avr-gdb-python-script-to-get-flag-from-a-debug-build-of-https-blog-wokwi-com-capture-the-flag-shitty-add-on", "published_at": "2021-02-15T00:00:00+00:00" }, { "id": "01a08737-955c-7124-b893-e164b9d9dd8d", "title": "ESPHome IR→BLE Keyboard", "url": "https://bburky.com/#esphome-irkeyboard", "published_at": "2021-01-31T00:00:00+00:00" }, { "id": "01a08737-955c-7124-b893-e164ba1d27c6", "title": "Python WinRT Image Capture (and Focus Stacking)", "url": "https://bburky.com/#python-win-rt-image-capture-and-focus-stacking", "published_at": "2020-05-03T00:00:00+00:00" }, { "id": "01a08737-955c-7124-b893-e164ba3a0a61", "title": "Capture The Flag Shitty Add-On Writeup", "url": "https://bburky.com/#shitty-addon", "published_at": "2019-11-30T00:00:00+00:00" }, { "id": "01a08737-955c-7124-b893-e164bb1bf14b", "title": "PlaidCTF 2019: A Whaley Good Joke writeup", "url": "https://bburky.com/#a-whaley-good-joke", "published_at": "2019-04-14T00:00:00+00:00" }, { "id": "01a08737-955c-7124-b893-e164bb711705", "title": "DIY NAS / Router", "url": "https://bburky.com/#nas", "published_at": "2018-09-16T00:00:00+00:00" }, { "id": "01a08737-955c-7124-b893-e164bc2be4a0", "title": "Multitouch Calligraphy (Code Golf)", "url": "https://bburky.com/#multitouch-calligraphy", "published_at": "2018-01-23T00:00:00+00:00" }, { "id": "01a08737-955c-7124-b893-e164bca10183", "title": "Subreddit Gender Ratios", "url": "https://bburky.com/#subreddit-gender-ratios", "published_at": "2017-12-31T00:00:00+00:00" }, { "id": "01a08737-955c-7124-b893-e164bcc81eb3", "title": "Mathematica CTF Writeups", "url": "https://bburky.com/#mathematica", "published_at": "2016-08-30T00:00:00+00:00" }, { "id": "01a08737-955c-7124-b893-e164bd24d3e3", "title": "Google CTF 2016: Little Bobby Application writeup", "url": "https://bburky.com/#google-ctf-2016-little-bobby-application", "published_at": "2016-05-01T00:00:00+00:00" }, { "id": "01a08737-955c-7124-b893-e164be240e7d", "title": "Mercurial arbitrary code execution", "url": "https://bburky.com/#mercurial", "published_at": "2016-03-29T00:00:00+00:00" }, { "id": "01a08737-955c-7124-b893-e164be670aa0", "title": "Mercurial remote code execution in GitHub Importer", "url": "https://bburky.com/#github-importer", "published_at": "2016-03-21T00:00:00+00:00" }, { "id": "01a08737-955c-7124-b893-e164bf0848f8", "title": "Git remote code execution via submodules and git-remote-ext", "url": "https://bburky.com/#git-remote-ext", "published_at": "2015-09-28T00:00:00+00:00" }, { "id": "01a08737-955c-7124-b893-e164bfbee179", "title": "Core fonts for the Web web fonts", "url": "https://bburky.com/#core-fonts-for-the-web-web-fonts", "published_at": "2014-05-06T00:00:00+00:00" }, { "id": "01a08737-955c-7124-b893-e164c03b3948", "title": "Block to Block Game", "url": "https://bburky.com/#block-to-block", "published_at": "2014-05-01T00:00:00+00:00" }, { "id": "01a08737-955c-7124-b893-e164c118a0d9", "title": "miniCodeEditor (Code Golf)", "url": "https://bburky.com/#miniCodeEditor", "published_at": "2013-12-07T00:00:00+00:00" } ] posts Claim your blog
Back to bburky.com
Blog · corpus.blog/blogs/bburky.com/posts

bburky.com

bburky.com

2025

Unofficial Smart Chef kitchen scale webapporiginal ↗
15 Aug 2025
Keycloak verify existing account by email could be performed with a spoofed emailoriginal ↗
8 Jul 2025
MinIO Operator used Kubernetes apiserver audience for AssumeRoleWithWebIdentity STSoriginal ↗
21 Apr 2025

2024

Missing authorization check on cross repository blob mount in multiple open source container registriesoriginal ↗
9 Jul 2024
Overly permissive IAM policy in github-aws-runners/terraform-aws-github-runneroriginal ↗
1 Jul 2024
San Antonio BSides CTF 2024original ↗
8 Jun 2024

2023

Kyverno policy bypass using Kubernetes finalizersoriginal ↗
1 Jun 2023

2021

Playlist Extension for Playniteoriginal ↗
12 Sept 2021
Inject Steam GameOverlayRenderer DLL with Fridaoriginal ↗
16 Aug 2021
Proof of concept SECCOMP_RET_USER_NOTIF based Frida Syscall Traceroriginal ↗
26 Jun 2021
Buildah/Podman chroot isolation: environment value leakage to intermediate processesoriginal ↗
15 Jun 2021
Offline Kubernetes manifest diff (does not use cluster state)original ↗
21 May 2021
EPUB full text search using SQLite FTS5original ↗
17 May 2021
Function hooking example using avr-gdb's built-in simulator and Pythonoriginal ↗
15 Feb 2021
ESPHome IR→BLE Keyboardoriginal ↗
31 Jan 2021

2020

Python WinRT Image Capture (and Focus Stacking)original ↗
3 May 2020

2019

Capture The Flag Shitty Add-On Writeuporiginal ↗
30 Nov 2019
PlaidCTF 2019: A Whaley Good Joke writeuporiginal ↗
14 Apr 2019

2018

DIY NAS / Routeroriginal ↗
16 Sept 2018
Multitouch Calligraphy (Code Golf)original ↗
23 Jan 2018

2017

Subreddit Gender Ratiosoriginal ↗
31 Dec 2017

2016

Mathematica CTF Writeupsoriginal ↗
30 Aug 2016
Google CTF 2016: Little Bobby Application writeuporiginal ↗
1 May 2016
Mercurial arbitrary code executionoriginal ↗
29 Mar 2016
Mercurial remote code execution in GitHub Importeroriginal ↗
21 Mar 2016

2015

Git remote code execution via submodules and git-remote-extoriginal ↗
28 Sept 2015

2014

Core fonts for the Web web fontsoriginal ↗
6 May 2014
Block to Block Gameoriginal ↗
1 May 2014

2013

miniCodeEditor (Code Golf)original ↗
7 Dec 2013