corpus.blog
41554 blogs · [ { "id": "01a087cf-b3d7-7100-80d8-6863ae24c930", "title": "Vibe Hacking: Proxying Flutter Traffic on Android with Claude", "url": "https://randywestergren.com/vibe-hacking-proxying-flutter-traffic-on-android-with-claude/", "published_at": "2026-01-06T15:14:46+00:00" }, { "id": "01a087cf-b3d8-7368-820d-9d7039ba8384", "title": "Building pyodbc for AWS Lambda’s Python 3.13 Runtime", "url": "https://randywestergren.com/building-pyodbc-for-aws-lambdas-python-3-13-runtime/", "published_at": "2025-01-12T00:39:29+00:00" }, { "id": "01a087cf-b3d8-7368-820d-9d7039cfb52a", "title": "Analyzing VPC Flow Logs to Reduce NAT Gateway Costs", "url": "https://randywestergren.com/analyzing-vpc-flow-logs-to-reduce-nat-gateway-costs/", "published_at": "2024-10-18T11:27:15+00:00" }, { "id": "01a087cf-b3d8-7368-820d-9d703a622d02", "title": "Provisioned Concurrency in Serverless Framework Step Functions", "url": "https://randywestergren.com/provisioned-concurrency-in-serverless-framework-step-functions/", "published_at": "2023-05-30T21:39:03+00:00" }, { "id": "01a087cf-b3d8-7368-820d-9d703b5fefcd", "title": "Reverse Engineering Watermarks on a Professional Photography Platform", "url": "https://randywestergren.com/reverse-engineering-watermarks-on-a-professional-photography-platform/", "published_at": "2022-10-18T10:56:15+00:00" }, { "id": "01a087cf-b3d8-7368-820d-9d703c339df7", "title": "Simplified SSO with AWS Application Load Balancer and Azure AD OIDC", "url": "https://randywestergren.com/simplified-sso-with-aws-application-load-balancer-and-azure-ad-oidc/", "published_at": "2022-10-07T12:21:36+00:00" }, { "id": "01a087cf-b3d8-7368-820d-9d703ccbfc43", "title": "Building pymssql (FreeTDS) for Lambda", "url": "https://randywestergren.com/building-pymssql-freetds-for-lambda/", "published_at": "2022-03-20T17:13:47+00:00" }, { "id": "01a087cf-b3d8-7368-820d-9d703d1b5db1", "title": "Event-Driven Access to My Home After a Run", "url": "https://randywestergren.com/event-driven-access-to-my-home-after-a-run/", "published_at": "2022-02-08T12:47:15+00:00" }, { "id": "01a087cf-b3d8-7368-820d-9d703dd921c8", "title": "Building pyodbc for Lambda’s Python 3.9 Runtime", "url": "https://randywestergren.com/building-pyodbc-for-lambdas-python-3-9-runtime/", "published_at": "2021-11-23T12:20:48+00:00" }, { "id": "01a087cf-b3d8-7368-820d-9d703de4769d", "title": "Unauthenticated Remote Code Execution in Motorola Baby Monitors", "url": "https://randywestergren.com/unauthenticated-remote-code-execution-in-motorola-baby-monitors/", "published_at": "2021-09-14T12:15:07+00:00" }, { "id": "01a0bdf2-57d9-7058-8b95-61431adbc13b", "title": "Mystery Timeouts with MS Graph API Webhook Subscriptions and AWS API Gateway", "url": "https://randywestergren.com/mystery-timeouts-with-ms-graph-api-webhook-subscriptions-and-aws-api-gateway/", "published_at": "2020-10-29T15:28:15+00:00" }, { "id": "01a0bdf2-57d9-7058-8b95-61431bbf5ae1", "title": "A Closer Look at Recent HTTP/2 Vulnerabilities Affecting K8s and Other Implementations", "url": "https://randywestergren.com/a-closer-look-at-recent-http-2-vulnerabilities-affecting-k8s-and-other-implementations/", "published_at": "2019-09-03T23:19:34+00:00" }, { "id": "01a0bdf2-57d9-7058-8b95-61431bcaefa9", "title": "XSS Vulnerabilities in Multiple iFrame Busters Affecting Top Tier Sites", "url": "https://randywestergren.com/xss-vulnerabilities-in-multiple-iframe-busters-affecting-top-tier-sites/", "published_at": "2018-09-17T22:56:05+00:00" }, { "id": "01a0bdf2-57d9-7058-8b95-61431bd49255", "title": "Compromising OpenDrive’s Cloud Storage Accounts – Or How Not to Design Session Management", "url": "https://randywestergren.com/compromising-opendrives-cloud-storage-accounts-or-how-not-to-design-session-management/", "published_at": "2018-04-09T14:43:20+00:00" }, { "id": "01a0bdf2-57d9-7058-8b95-61431c37da5e", "title": "Persistent XSS in PNC’s Secure Email System", "url": "https://randywestergren.com/persistent-xss-pncs-secure-email-system/", "published_at": "2018-01-21T18:44:12+00:00" }, { "id": "01a0bdf2-57d9-7058-8b95-61431c84ed86", "title": "Reverse Engineering the OBi200 Google Voice Appliance: Part 3", "url": "https://randywestergren.com/reverse-engineering-obi200-google-voice-appliance-part-3/", "published_at": "2018-01-10T20:40:42+00:00" }, { "id": "01a0bdf2-57d9-7058-8b95-61431cd51b5a", "title": "Reverse Engineering the OBi200 Google Voice Appliance: Part 2", "url": "https://randywestergren.com/reverse-engineering-obi200-google-voice-appliance-part-2/", "published_at": "2017-09-12T13:39:15+00:00" }, { "id": "01a0bdf2-57d9-7058-8b95-61431d5661ea", "title": "Reverse Engineering the OBi200 Google Voice Appliance: Part 1", "url": "https://randywestergren.com/reverse-engineering-obi200-google-voice-appliance-part-1/", "published_at": "2017-08-31T13:01:01+00:00" }, { "id": "01a0bdf2-57d9-7058-8b95-61431d5d95aa", "title": "Bright City: A Highly Insecure Police and Municipal Government App", "url": "https://randywestergren.com/bright-city-highly-insecure-police-municipal-government-app/", "published_at": "2017-07-24T20:19:46+00:00" }, { "id": "01a0bdf2-57d9-7058-8b95-61431dd5cfc2", "title": "XSS over SMS: Hacking Text Messages in Verizon Messages", "url": "https://randywestergren.com/xss-sms-hacking-text-messages-verizon-messages/", "published_at": "2017-05-21T14:45:22+00:00" }, { "id": "01a0be03-2f16-7361-8896-b4728fa9033c", "title": "Rave Panic Button: Vulnerabilities in a Nationwide Emergency Alert System", "url": "https://randywestergren.com/rave-panic-button-vulnerabilities-nationwide-emergency-alert-system/", "published_at": "2017-01-12T15:55:58+00:00" }, { "id": "01a0be03-2f16-7361-8896-b47290268499", "title": "Persistent XSS in Verizon’s Webmail Client", "url": "https://randywestergren.com/persistent-xss-verizons-webmail-client/", "published_at": "2016-12-15T13:30:49+00:00" }, { "id": "01a0be03-2f16-7361-8896-b472910275a2", "title": "Why I Helped Draft State-Level Vulnerability Disclosure Legislation (Delaware SB 283)", "url": "https://randywestergren.com/helped-draft-state-level-vulnerability-disclosure-legislation-delaware-sb-283/", "published_at": "2016-06-20T21:23:47+00:00" }, { "id": "01a0be03-2f16-7361-8896-b472912e1314", "title": "Critical Vulnerability Compromising Verizon Email Accounts (Again)", "url": "https://randywestergren.com/critical-vulnerability-compromising-verizon-email-accounts/", "published_at": "2016-06-14T00:02:48+00:00" }, { "id": "01a0be03-2f16-7361-8896-b472916c326a", "title": "Widespread Vulnerable Ads Part Two: Flash Edition (Facebook’s LiveRail, Akamai, Adobe products affected)", "url": "https://randywestergren.com/widespread-vulnerable-ads-part-two-flash-edition-facebooks-liverail-akamai-adobe-products-affected/", "published_at": "2016-05-23T14:47:16+00:00" }, { "id": "01a0be03-2f16-7361-8896-b47292455ac4", "title": "Compliance Strikes Again: Multiple Vulnerabilities in Worldpay’s Merchant Portal", "url": "https://randywestergren.com/compliance-strikes-multiple-vulnerabilities-worldpays-merchant-portal/", "published_at": "2016-04-10T10:20:40+00:00" }, { "id": "01a0be03-2f16-7361-8896-b472933ba4e1", "title": "Vulnerabilities in a Third-Party Healthcare Payment Processor", "url": "https://randywestergren.com/vulnerabilities-third-party-healthcare-payment-processor/", "published_at": "2016-03-24T23:13:00+00:00" }, { "id": "01a0be03-2f16-7361-8896-b472943211f5", "title": "Widespread XSS Vulnerabilities in Ad Network Code Affecting Top Tier Publishers, Retailers", "url": "https://randywestergren.com/widespread-xss-vulnerabilities-ad-network-code-affecting-top-tier-publishers-retailers/", "published_at": "2016-03-02T15:14:31+00:00" }, { "id": "01a0be03-2f16-7361-8896-b472948403e6", "title": "Hijacking Verizon FiOS Accounts", "url": "https://randywestergren.com/hijacking-verizon-fios-accounts/", "published_at": "2016-01-10T21:44:07+00:00" }, { "id": "01a0be03-2f17-7079-b4f9-682c3e2a1d02", "title": "Running a Hidden Tor Service with Docker Compose", "url": "https://randywestergren.com/running-a-hidden-tor-service-with-docker-compose/", "published_at": "2016-01-03T16:51:07+00:00" }, { "id": "01a0be09-b8c9-7141-9b75-1d2f1cdf7aae", "title": "Reverse Engineering the Yik Yak Android App", "url": "https://randywestergren.com/reverse-engineering-the-yik-yak-android-app/", "published_at": "2015-12-22T15:16:22+00:00" }, { "id": "01a0be09-b8c9-7141-9b75-1d2f1d095cfb", "title": "Cutting the Lights: Vulnerabilities in a Billboard Lighting System", "url": "https://randywestergren.com/cutting-the-lights-vulnerabilities-in-a-billboard-lighting-system/", "published_at": "2015-11-29T14:58:10+00:00" }, { "id": "01a0be09-b8c9-7141-9b75-1d2f1d9d5243", "title": "United Airlines Bug Bounty: An experience in reporting a serious vulnerability", "url": "https://randywestergren.com/united-airlines-bug-bounty-an-experience-in-reporting-a-serious-vulnerability/", "published_at": "2015-11-22T22:13:07+00:00" }, { "id": "01a0be09-b8c9-7141-9b75-1d2f1e60b1bc", "title": "Multiple Vulnerabilities in ShowingTime", "url": "https://randywestergren.com/multiple-vulnerabilities-in-showingtime/", "published_at": "2015-08-23T14:39:01+00:00" }, { "id": "01a0be09-b8c9-7141-9b75-1d2f1eec8f2d", "title": "Reverse Engineering the Subway Android App", "url": "https://randywestergren.com/reverse-engineering-the-subway-android-app/", "published_at": "2015-07-10T12:14:25+00:00" }, { "id": "01a0be09-b8c9-7141-9b75-1d2f1fd68363", "title": "Z-Way Home Automation Part 2: An Analysis of Publicly Vulnerable Gateways", "url": "https://randywestergren.com/z-way-home-automation-part-2-an-analysis-of-publicly-vulnerable-gateways/", "published_at": "2015-05-24T12:31:52+00:00" }, { "id": "01a0be09-b8c9-7141-9b75-1d2f20560038", "title": "Multiple Vulnerabilities in Verizon’s FiOS Mobile API Exposing Customer Information", "url": "https://randywestergren.com/multiple-vulnerabilities-in-verizons-fios-mobile-api-exposing-customer-information/", "published_at": "2015-05-13T14:36:35+00:00" }, { "id": "01a0be09-b8c9-7141-9b75-1d2f20fe9ea1", "title": "Attacking Z-Way Controlled Home Automation Devices", "url": "https://randywestergren.com/attacking-z-way-controlled-home-automation-devices/", "published_at": "2015-05-10T14:24:11+00:00" }, { "id": "01a0be09-b8c9-7141-9b75-1d2f215e19ac", "title": "Privacy Vulnerability in TurboTax’s API", "url": "https://randywestergren.com/privacy-vulnerability-in-turbotaxs-api/", "published_at": "2015-04-15T13:00:35+00:00" }, { "id": "01a0be09-b8c9-7141-9b75-1d2f21727d1a", "title": "Wawa Rewards Gift Card Takeover Vulnerability", "url": "https://randywestergren.com/wawa-rewards-gift-card-takeover-vulnerability/", "published_at": "2015-04-09T14:57:00+00:00" } ] posts Claim your blog
Back to randywestergren.com
Blog · corpus.blog/blogs/randywestergren.com/posts

randywestergren.com

randywestergren.com

2026

Vibe Hacking: Proxying Flutter Traffic on Android with Claudeoriginal ↗
6 Jan 2026

2025

Building pyodbc for AWS Lambda’s Python 3.13 Runtimeoriginal ↗
12 Jan 2025

2024

Analyzing VPC Flow Logs to Reduce NAT Gateway Costsoriginal ↗
18 Oct 2024

2023

Provisioned Concurrency in Serverless Framework Step Functionsoriginal ↗
30 May 2023

2022

Reverse Engineering Watermarks on a Professional Photography Platformoriginal ↗
18 Oct 2022
Simplified SSO with AWS Application Load Balancer and Azure AD OIDCoriginal ↗
7 Oct 2022
Building pymssql (FreeTDS) for Lambdaoriginal ↗
20 Mar 2022
Event-Driven Access to My Home After a Runoriginal ↗
8 Feb 2022

2021

Building pyodbc for Lambda’s Python 3.9 Runtimeoriginal ↗
23 Nov 2021
Unauthenticated Remote Code Execution in Motorola Baby Monitorsoriginal ↗
14 Sept 2021

2020

Mystery Timeouts with MS Graph API Webhook Subscriptions and AWS API Gatewayoriginal ↗
29 Oct 2020

2019

A Closer Look at Recent HTTP/2 Vulnerabilities Affecting K8s and Other Implementationsoriginal ↗
3 Sept 2019

2018

XSS Vulnerabilities in Multiple iFrame Busters Affecting Top Tier Sitesoriginal ↗
17 Sept 2018
Compromising OpenDrive’s Cloud Storage Accounts – Or How Not to Design Session Managementoriginal ↗
9 Apr 2018
Persistent XSS in PNC’s Secure Email Systemoriginal ↗
21 Jan 2018
Reverse Engineering the OBi200 Google Voice Appliance: Part 3original ↗
10 Jan 2018

2017

Reverse Engineering the OBi200 Google Voice Appliance: Part 2original ↗
12 Sept 2017
Reverse Engineering the OBi200 Google Voice Appliance: Part 1original ↗
31 Aug 2017
Bright City: A Highly Insecure Police and Municipal Government Apporiginal ↗
24 Jul 2017
XSS over SMS: Hacking Text Messages in Verizon Messagesoriginal ↗
21 May 2017
Rave Panic Button: Vulnerabilities in a Nationwide Emergency Alert Systemoriginal ↗
12 Jan 2017

2016

Persistent XSS in Verizon’s Webmail Clientoriginal ↗
15 Dec 2016
Why I Helped Draft State-Level Vulnerability Disclosure Legislation (Delaware SB 283)original ↗
20 Jun 2016
Critical Vulnerability Compromising Verizon Email Accounts (Again)original ↗
14 Jun 2016
Widespread Vulnerable Ads Part Two: Flash Edition (Facebook’s LiveRail, Akamai, Adobe products affected)original ↗
23 May 2016
Compliance Strikes Again: Multiple Vulnerabilities in Worldpay’s Merchant Portaloriginal ↗
10 Apr 2016
Vulnerabilities in a Third-Party Healthcare Payment Processororiginal ↗
24 Mar 2016
Widespread XSS Vulnerabilities in Ad Network Code Affecting Top Tier Publishers, Retailersoriginal ↗
2 Mar 2016
Hijacking Verizon FiOS Accountsoriginal ↗
10 Jan 2016
Running a Hidden Tor Service with Docker Composeoriginal ↗
3 Jan 2016

2015

Reverse Engineering the Yik Yak Android Apporiginal ↗
22 Dec 2015
Cutting the Lights: Vulnerabilities in a Billboard Lighting Systemoriginal ↗
29 Nov 2015
United Airlines Bug Bounty: An experience in reporting a serious vulnerabilityoriginal ↗
22 Nov 2015
Multiple Vulnerabilities in ShowingTimeoriginal ↗
23 Aug 2015
Reverse Engineering the Subway Android Apporiginal ↗
10 Jul 2015
Z-Way Home Automation Part 2: An Analysis of Publicly Vulnerable Gatewaysoriginal ↗
24 May 2015
Multiple Vulnerabilities in Verizon’s FiOS Mobile API Exposing Customer Informationoriginal ↗
13 May 2015
Attacking Z-Way Controlled Home Automation Devicesoriginal ↗
10 May 2015
Privacy Vulnerability in TurboTax’s APIoriginal ↗
15 Apr 2015
Wawa Rewards Gift Card Takeover Vulnerabilityoriginal ↗
9 Apr 2015