Intercept SSM Agent Communications
Research on post-exploitation techniques against SSM Agent abusing send-command and start-session.
Last crawled: 19 Sep 2026 21:54 UTCScreenshot queued · Request priority →Nick Frichette
nickf43ab43xxf3yqgzy5uedsjij6h473rmbyzq6inohcnr3lohlu3yd.onion
onlineRecorded observations
TorSeeker has indexed 25 pages and stored 18 visible screenshots for this address. The latest reachability check was 20 Sep 2026 18:13 UTC.
These records are collected automatically. Source claims are not independently verified. How to interpret this profile →
Source-provided description · Unverified
The personal website of Nick Frichette, Software Developer and Security Researcher
Inspect onion link →Indexed pages
Revisiting Lambda Persistence
Revisiting and building on the original Lambda persistence technique.
Last crawled: 19 Sep 2026 21:54 UTCScreenshot queued · Request priority →OSCP Review
My thoughts and experiences with the OSCP
Last crawled: 19 Sep 2026 21:54 UTCScreenshot queued · Request priority →OpenSSL Punycode Vulnerabiliy (CVE-2022-3602)
Datadog: A technical analysis of the OpenSSL punycode vulnerability.
Last crawled: 19 Sep 2026 21:54 UTCScreenshot queued · Request priority →Two Minor Cross-Tenant Vulnerabilities in AWS App Runner
Writeup for two minor cross-tenant vulnerabilities I found in AWS App Runner.
Last crawled: 19 Sep 2026 21:54 UTCScreenshot queued · Request priority →Intercept Linux CLI Tool Traffic
A guide on how to intercept Linux CLI tool traffic with Burp Suite
Last crawled: 19 Sep 2026 21:54 UTCScreenshot queued · Request priority →IDOR Attacks
An introduction to IDOR attacks
Last crawled: 19 Sep 2026 21:54 UTCView screenshot archive →How Hotel Wi-Fi Broke My Tailscale Peer Relay
How to setup Tailscale peer relays to listen on multiple ports.
Last crawled: 19 Sep 2026 21:53 UTCView screenshot archive →Hijacking IAM Roles and Avoiding Detection
A guide on how to steal IAM role keys and use them without being detected
Last crawled: 19 Sep 2026 21:53 UTCView screenshot archive →Escalating Deserialization Attacks (Python)
Demonstrating how to exploit deserialization attacks in Python 2/3
Last crawled: 19 Sep 2026 21:53 UTCView screenshot archive →CVE-2020-11108: How I Stumbled into a Pi-hole RCE+LPE
Writeup for CVE-2020-11108 covering how I found the vulnerability and how it can be exploited for fun/profit.
Last crawled: 19 Sep 2026 21:53 UTCView screenshot archive →Security Headers: Content Security Policy
An in depth overview of the Content Security Policy header
Last crawled: 19 Sep 2026 21:53 UTCView screenshot archive →Bypass GuardDuty PenTest Alerts
A guide to bypass the GuardDuty PenTest Finding Type
Last crawled: 19 Sep 2026 21:53 UTCView screenshot archive →A Look at AWS API Protocols
An introduction to AWS API protocols and how they work.
Last crawled: 19 Sep 2026 21:53 UTCCapture failed · View retry status →Enumerate AWS API Permissions Without Logging to CloudTrail
Writeup for a bug I discovered in the AWS API that would allow you to enumerate certain permissions for a role without logging to CloudTrail.
Last crawled: 19 Sep 2026 21:53 UTCView screenshot archive →A Confused Deputy Vulnerability in AWS AppSync
Datadog: Technical analysis of a confused deputy vulnerability I found in AWS AppSync.
Last crawled: 19 Sep 2026 21:53 UTCView screenshot archive →Angular Universal: Some Insights
Some advice based on my experience with Angular Universal
Last crawled: 19 Sep 2026 21:53 UTCView screenshot archive →Amplified exposure: How AWS flaws made Amplify IAM roles vulnerable to takeover
Public disclosure of a vulnerability in AWS Amplify which exposed IAM roles associated with Amplify projects to be assumed by anyone in the world.
Last crawled: 19 Sep 2026 21:53 UTCView screenshot archive →Abusing GitLab Runners
Some research I did on abusing GitLab Runners to steal information by emulating a runner's behavior.
Last crawled: 19 Sep 2026 21:53 UTCView screenshot archive →Abusing AWS Connection Tracking
Tunnel out of restricted security groups by abusing connection tracking.
Last crawled: 19 Sep 2026 21:53 UTCView screenshot archive →Blog RSS
Blog RSS
Last crawled: 19 Sep 2026 21:53 UTCView screenshot archive →Contact Me
How to contact me
Last crawled: 19 Sep 2026 21:53 UTCView screenshot archive →Blog
Blog where I cover software development and information security
Last crawled: 19 Sep 2026 21:53 UTCView screenshot archive →Blog
Blog where I cover software development and information security
Last crawled: 19 Sep 2026 21:53 UTCView screenshot archive →Nick Frichette
The personal website of Nick Frichette, Software Developer and Security Researcher
Last crawled: 19 Sep 2026 21:53 UTCView screenshot archive →Archived screenshots
Previews are blurred. Select an image and accept its content warning to reveal it. Tor is not required.
IDOR Attacks
20 Sep 2026 15:27 UTC · 12.1 KB
How Hotel Wi-Fi Broke My Tailscale Peer Relay
20 Sep 2026 04:41 UTC · 14.3 KB
Hijacking IAM Roles and Avoiding Detection
19 Sep 2026 19:16 UTC · 18.5 KB
Escalating Deserialization Attacks (Python)
19 Sep 2026 11:39 UTC · 13.7 KB
CVE-2020-11108: How I Stumbled into a Pi-hole RCE+LPE
19 Sep 2026 06:24 UTC · 15.9 KB
Security Headers: Content Security Policy
19 Sep 2026 02:33 UTC · 17.7 KB
Observed outgoing links
No outgoing links observed yet.
Check history
Swipe or scroll the table horizontally to see all columns.
| Time (UTC) | Response | HTTP | Duration |
|---|---|---|---|
| 20 Sep 2026 18:13:33 | Reachable | 200 | 3702 ms |
| 20 Sep 2026 09:40:18 | Reachable | 200 | 2536 ms |
| 19 Sep 2026 21:33:39 | Reachable | 200 | 7789 ms |
| 19 Sep 2026 11:12:05 | Reachable | 200 | 2687 ms |
| 19 Sep 2026 02:01:50 | Reachable | 200 | 2267 ms |
| 18 Sep 2026 19:56:42 | Reachable | 200 | 5711 ms |
| 18 Sep 2026 13:07:55 | Reachable | 200 | 6990 ms |