Hackerman's Hacking Tutorials

This post discusses what I learned about executing JavaScript code in Java with Mozilla Rhino.

A few days ago, I released the Bug Diaries Burp extension.

In the two previous parts, we learned about Jython Swing.

In part 1 we discussed handcrafting Swing GUI items in a form.

TL;DR: What I learned from creating handcrafted GUIs for Python Burp extensions using Swing.

Quality of life patch/update in the context of videogames is a patch that focuses on fixing bugs instead of introducing new content.

TL;DR: Open 11 screws.

This is a blog post about how I found three vulns and chained them to get RCE in the Microsoft AttackSurfaceAnalyzer (ASA moving forward) GUI version.

This post explains a trick that I have been using for a few years to discover application endpoints on Windows quickly.

I tried to disable Burp's update nag screen and failed.

This is a revisit of Manual Work is a Bug during my ramp up at my new job.

TL;DR: No matter what you do, your Burp extension cannot modify requests before they hit the HTTP History panel.

Credit goes to my friend Stark Riedesel.

I am going to talk about defense.

In this part, I am going to use dnSpy to enable the Debug HUD.

In part 1 we messed a bit with Moonlighter but modifying the save file.

Moonlighter is a nice game.

During the SANS Holiday Hack Challenge 2018, I viewed a talk by Mark Baggett about escaping Python shells.

SANS Holiday hack challenge 2018 was fun.

Cloudflare had a Christmas crypto(graphy) challenge.

In this post, I will discuss a few tricks for creating Burp extensions in Python that deal with cryptography.

We have encrypted something with AES-CFB128 in Go.

We can create and load Python/Java utility modules in Burp and then use them in extensions.

In Part 1 - Burp Session Validation with Macros I discussed using Burp macros to validate sessions.

Tiredful API is an intentionally vulnerable REST API.

tl;dr: HEAD returns file size in Content-Length response header.

Do not directly assign the for counter/range variables to a slice as pointers.

The filepath package has some functions for processing paths and filenames.

For a side project, I have to parse timestamps in a file.

I have been working on a personal automation project.

The DEF CON 26 video is finally released: https://www.youtube.com/watch?

I recently finished Gophercises, a great set of Go practice lessons by Jon Calhoun.

I recently read Manual Work is a Bug by Thomas A.

So I wrote about Tineola for our corporate blog.

Thick clients store ample information on the device.

We recently presented our tool at the DefCon 26 conference in Vegas.

After doing network recon in part three, it's time to do some traffic manipulation.

In this part, we will focus on network traffic.

After setting up the Damn Vulnerable Thick Client Application, we are now ready to hack it.

I have written a lot about thick clients.

Recently I was in Istanbul for two weeks in June 2018.

In January 2018, Context Information Security had a CTF.

Enumeration is identifying valid resources in a target address space.

Previously on Learning Go-Fuzz: "Learning Go-Fuzz 1: iprange" This time I am looking at a different package.

Go-Fuzz is like AFL but for Go.

TL;DR: Instead of creating an index manually for Github, I am using a Hugo blog for my knowledge base (a.k.a.

I finally managed to automate deployment of parsiya.io with Travis CI.

Update: Chroma now supports solarized-dark families.

I had a 30 minute talk about Blockchain security at NoVA Hackers on March 12th 2018.

This is copied to a blog entry on Aug 1 2016.