LANRAT

Every year I help run the Network Operations Center (NOC) for BSidesSF, a volunteer-run information security conference in San Francisco.

2048 Touch is an implementation of the classic 2048 sliding-tile puzzle game for Pebble smartwatches.

When working in my office during the day, I enjoy having my windows open to get as much natural light in as possible.

The disk group seems innocent enough - it’s meant for disk management utilities.

A browser-based and CLI tool for generating WireGuard configurations compatible with Cloudflare WARP.

Got a bunch of MikroTik switches running SwOS or SwOS Lite with no good way to manage them centrally?

A collection of custom plugins for TRMNL e-ink displays.

In 2016, removing an 11-line npm package called left-pad broke thousands of projects worldwide.

Drouter provides dynamic route injection for Docker containers through label-based configuration.

When working with Docker containers on complex networks, you often need to add static routes so containers can reach networks that aren’t directly connected to their default gateway.

ARIN IPv4 Wait-list Tracking analyzes ARIN’s IPv4 address wait-list and provides statistical insights into wait times and allocation patterns.

When developing with ESPHome on ESP32 devices, crashes can be frustrating to debug without proper stack traces.

Adtran 411 Security Audit Adtran produces equipment for fiber ISPs.

A real-time visualization of day and night regions across the world using accurate solar and lunar positioning calculations.

VLAN Scout discovers active VLANs and their configurations through passive monitoring and active probing.

Bin Voter reconstructs correct binary files from multiple corrupted firmware dumps by implementing a voting algorithm across byte positions.

Bambu P1S Hacking contains firmware dumps, PCB analysis, and X-ray scans of the Bambu Labs P1S 3D printer’s ESP32-S3 controller board.

DPRK.team is a satirical website that parodies authoritarian cybersecurity organizations through the fictional “Glorious People’s Cybersecurity Directorate.”

Tunneling WireGuard over TLS using SNI Domain Fronting There are numerous ways to get unrestricted egress on a restricted network.

This post outlines the process to replace a Tuya radio module with one running ESPHome to fully control a heated mattress pad locally with Home Assistant.

GPM2Spotify History converts Google Play Music listening history data to Spotify-compatible JSON format.

When creating a socket unless manually specified, the OS will automatically determine the source address to use.

Scroller is a web application that displays customizable scrolling text messages in fullscreen mode.

Caddy Signal Proxy implements a Signal TLS proxy using the Caddy web server and the caddy-l4 plugin.

When running a network with its own ASN, you will likely end up spending some time working with BGP.

Portquiz tests outbound TCP and UDP connectivity to remote hosts by attempting connections across specified port ranges.

Caddy Dynamic RemoteIP is a Caddy web server module that provides dynamic IP address matching capabilities.

TOOR.sh is a cloud and VM hosting service operated by ToorCon, a 501c3 non-profit organization that provides free hosting resources for security research and public benefit projects.

WebSerial Bruteforce automatically determines the correct baud rate for UART serial devices by testing common communication speeds and analyzing the returned data.

USB Meter is a web application that connects to Atorch power meters via WebBluetooth to log and display electrical measurements.

An opkg repository that builds Tailscale combined packages for OpenWrt devices, specifically providing a backport of Tailscale for OpenWrt 19.07.

Mag Encode is a web-based magnetic stripe card encoder that generates audio signals for encoding data onto magnetic stripe cards.

Broken DNS performs lame delegation checking at scale to identify DNS nameserver configuration issues.

Minimalin Reborn is a minimalistic watchface for Pebble smartwatches, featuring a clean design with customizable colors and optional information displays.

Recent versions of Ubuntu are shipping with Snapcraft by default, and some of the default applications run inside a snap as well.

Homeplate is an ESP32-based e-ink dashboard that displays data from Trmnl and Home Assistant on an Inkplate 10 device.

ESPHome Components is a collection of custom components that extend ESPHome functionality for ESP8266 and ESP32 microcontrollers.

DNS2mDNS bridges traditional DNS queries with multicast DNS (mDNS) resolution for .local hostnames.

This post outlines a security assessment of the new Sena Wifi Adapter I performed last summer for fun.

Luxer One is a Python API client for the Luxer One Residential package management system.

A while ago I received a bunch of bare ESP-WROOM-02 chips on tape, but I could not find enough documentation to program them (partially out of laziness).

Extsort is a Go library that implements external sorting algorithms for datasets larger than available memory.

Allxfr performs DNS zone transfers (AXFR) against nameservers to retrieve complete zone files.

Minimalin Watch Face is a minimalistic Wear OS watch face featuring clean typography and Material Design aesthetics.

Sometime in the first half of 2018 there was an explosion of “Dockless e-scooters” appearing all over the Bay Area.

M365 Toolbox demonstrates a security vulnerability in the Xiaomi M365 electric scooter’s communication protocol.

A Go library and SOCKS5 proxy server that enables egress traffic from multiple IP addresses within a subnet.

Binary Analog Watch Face is an Android Wear watch face that combines analog time display with binary representation.

This is the blog version of my DEFCON 26 talk Lost and Found Certificates: dealing with residual certificates for pre-owned domains, which I co-presented with Dylan Ayrey.

CZDS is a Go library and CLI tool for interacting with ICANN’s Centralized Zone Data Service API.