https://blakegrosskopf.com/writing/ Independent offensive-security researcher. Cloud attack paths from public exposure to subscription control, SaaS auth reverse-engineering, and the defenses that stop them. en-us https://blakegrosskopf.com/writing/metadata-endpoint-depends-on-compute-type/ https://blakegrosskopf.com/writing/metadata-endpoint-depends-on-compute-type/ Sat, 11 Jul 2026 00:00:00 GMT An SSRF into an Azure Function returned an empty metadata response — not because the attack failed, but because Functions has no VM IMDS. A short lesson on matching the metadata endpoint to the compute you actually landed on. https://blakegrosskopf.com/writing/okta-tenant-sprayable-by-default/ https://blakegrosskopf.com/writing/okta-tenant-sprayable-by-default/ Sat, 04 Jul 2026 00:00:00 GMT The Identity Engine sign-in surface validates passwords from the open internet by design. Here's what actually gates external spraying — and why turning on MFA isn't it.