███████╗██╗ ██╗██╗ ██╗ ███████╗████████╗ █████╗ ██████╗██╗ ██╗
██╔════╝██║ ██║██║ ██║ ██╔════╝╚══██╔══╝██╔══██╗██╔════╝██║ ██╔╝
█████╗ ██║ ██║██║ ██║ ███████╗ ██║ ███████║██║ █████╔╝
██╔══╝ ██║ ██║██║ ██║ ╚════██║ ██║ ██╔══██║██║ ██╔═██╗
██║ ╚██████╔╝███████╗███████╗███████║ ██║ ██║ ██║╚██████╗██║ ██╗
╚═╝ ╚═════╝ ╚══════╝╚══════╝╚══════╝ ╚═╝ ╚═╝ ╚═╝ ╚═════╝╚═╝ ╚═╝
██████╗ ██████╗ ████████╗ █████╗ ████████╗ ██████╗
██╔══██╗██╔═══██╗╚══██╔══╝██╔══██╗╚══██╔══╝██╔═══██╗
██████╔╝██║ ██║ ██║ ███████║ ██║ ██║ ██║
██╔═══╝ ██║ ██║ ██║ ██╔══██║ ██║ ██║ ██║
██║ ╚██████╔╝ ██║ ██║ ██║ ██║ ╚██████╔╝
╚═╝ ╚═════╝ ╚═╝ ╚═╝ ╚═╝ ╚═╝ ╚═════╝
>a potato that does security
(Offensive) security engineer @ intruder.io · Scotland · aka Ben Marr
Dev and pentest background. Mostly I poke at web apps and automate the boring parts of finding bugs.
Currently poking at: fast N-day PoCs, some reverse-engineering experiments, and what's exposed on the internet.
Writing · all posts →
- What is wp2shell and what can it teach us about vulnerability management?
- Clawdbot (Moltbot): When "Easy AI" Becomes a Security Nightmare
- What is the OpenSSH regreSSHion vulnerability (CVE-2024-6387)?
- Progress MOVEit Vulnerability (CVE-2024-5806): All You Need To Know
Research
- From enterprise chatbots to gooner caves: exposed AI infrastructure is rampant
- Secrets in your Bundle(.js) — The Gift Attackers Always Wanted
- Shadow IT Isn't Invisible — It's Expanding Your Attack Surface. Here's Proof
- How We're Using AI to Write Vulnerability Checks (and Where It Falls Short)
- days-since-openclaw-cve.com (meme)
PoC gadgets — self-hosted at 0y.is
> fullstackpotato ·
x ·
linkedin ·
benjamin [at] marr.id
Homepage: marr.id · 0y.is · m4rr.net — try curl 0y.is