Craig Hays – Medium

Craig Hays

Craig Hays

·

Jun 4, 2023

Admin of One — A Powerful Way to Highly Limit Blast Radius

One of the most important principles of cyber security is Admin of One. By reducing the number of devices a password can manage to a…

Admin of One — A Powerful Way to Highly Limit Blast Radius

In

InfoSec Write-ups

by

Craig Hays

·

Sep 22, 2022

Nmap OS Detection: Easy, Fast, and Powerful Examples [How To Guide]

Nmap OS detection is a quick and powerful way to determine what operating system a remote device is running. Here’s how to use it.

Nmap OS Detection: Easy, Fast, and Powerful Examples [How To Guide]

In

InfoSec Write-ups

by

Craig Hays

·

Sep 10, 2021

How Hackers Use Open-Source Intelligence to Ransomware Companies

Demonstrating with a real company how a hacker can compromise an organisation in under 2 hours using OSINT and social engineering.

How Hackers Use Open-Source Intelligence to Ransomware Companies

In

InfoSec Write-ups

by

Craig Hays

·

Aug 11, 2021

How I Bought a £240.00 Annual Subscription for Bargain £0.01

I found a way to alter a premium subscription service price and bought it for a penny. This is how I did it.

How I Bought a £240.00 Annual Subscription for Bargain £0.01

In

InfoSec Write-ups

by

Craig Hays

·

Jul 22, 2021

Pre-Account Takeover by Reversing a Weak Email Verification Token Algorithm

I spoofed access to other people’s email in order to pre-steal user accounts before they are first registered. Here’s how I did it.

Pre-Account Takeover by Reversing a Weak Email Verification Token Algorithm

In

InfoSec Write-ups

by

Craig Hays

·

Jun 22, 2021

Cracking Encrypted Credit Card Numbers Exposed By API

I found an API that exposed encrypted credit card numbers. Here’s how I cracked them to reveal the full card details.

Cracking Encrypted Credit Card Numbers Exposed By API

In

InfoSec Write-ups

by

Craig Hays

·

Jun 18, 2021

One Time Code Bypass With An Inverted Brute-Force Attack

“We’ve sent a six-digit code to your email address. Enter it below to login.”

One Time Code Bypass With An Inverted Brute-Force Attack

In

Digital Diplomacy

by

Craig Hays

·

Nov 6, 2020

Why You Should Never Trust a Free Proxy Server

Free and open proxy servers promise anonymous internet access, but at what cost?

Never trust an open proxy server

In

The Startup

by

Craig Hays

·

Oct 30, 2020

How Phishing Websites Use Captcha to Fool Browsers and People

Evading detection and building trust with Captcha challenges and Smishing attacks.

How Phishing Websites Use Captcha to Fool Browsers and People

In

The Startup

by

Craig Hays

·

Oct 25, 2020

Phishing Email to Company Devastating Ransomware in 5 Hours

How hackers manually escalated from a malicious email to a devastating, company-wide ransomware takeover in under 5 hours.

Phishing Email to Company Devastating Ransomware in 5 Hours

Craig Hays

Craig Hays

FinTech startup to £105 million acquisition. Now I make stuff and help people with cyber security. https://craighays.com

Following

Help

Status

About

Careers

Press

Blog

Store

Privacy

Rules

Terms

Text to speech