Josh Allman
RSS FeedJosh Allman writes about incident response, malware analysis, threat hunting, vulnerability research, and security research. This site is a personal archive of investigations, technical writing, and build notes shaped by my work in tactical response at Huntress and my independent research. All opinions expressed here are my own and do not reflect those of my employer.
Research Highlights
-
Shipping ClipShield, a Browser Extension That Blocks ClickFix and Clipboard Attacks
A practical dev log on why I built ClipShield, how it detects clipboard attack chains, and why I kept it zero telemetry and open source.
-
Inside a Low-Budget Spyware Operation
A case study on uncovering a low-budget mobile spyware operation, mapping exposed infrastructure, and documenting the operator's mistakes.
-
How we got code execution on a government satellite system
A case study on turning a public lead into command execution on a NOAA polar orbit ingestion system and responsibly disclosing the issue.
From the Archive
-
How I found an infinite money bug in a rewards platform
A business logic case study on finding and bypassing an employee rewards flaw that let points be reclaimed after they were spent.