Hackerman's Hacking Tutorials

Yesterday I had to extract some data from hidden chunks in PNG files.

CAP Theorem is another of those blockchain buzzwords.

In the previous blog post, I talked about Byzantine Fault Tolerance.

This distributed ledger thing clicked when I realized a blockchain is just a distributed network.

I read the NISTIR 8202 - Blockchain Technology Overview draft so you do not have to.

In Mounting Live Snapshots of Encrypted VMs in VirtualBox we mounted a live snapshot and logged into the machine.

TL;DR Problem: We have an encrypted Virtual Machine (VM) disk and the associated VirtualBox (VBox) live snapshot (taken when user was logged in).

I am working on this challenge and it has a large base64 file.

During my Go SSH adventures at Hacking with Go I wanted to write a simple SSH harvester.

There used to be Windows XP virtual machines on modern.ie.

I was trying to solve a challenge where the "hidden data" were in ICMP echo payloads.

Not real hacking!

This blog talks about how to run a command automatically every time you open a new command prompt on Windows.

Previous parts: Part 1 - Basics Part 2 - Function Hooking and Others Part 3 - Manipulating Function Calls We have learned some good stuff.

Previously on WinAppDbg-TV: Part 1 - Basics Part 2 - Function Hooking and Others As usual, code is in my clone on Github.

In part one we talked about the basics of WinAppDbg.

WinAppDbg by Mario Vilas is perhaps one of the most underrated instrumentation frameworks for Windows.

Previously we saw how Windows Run Line searches in App Paths registry keys before PATH.

Note about the differences between search paths when running stuff via the Windows Run Line (win+r), command line and PowerShell.

These are my notes about proxying Windows services.

.NET applications use a configuration file to read some settings.

A couple of years ago I looked at Razer Comms.

Some quick notes about base64 encoding.

I have moved from Atom to Sublime.

This is a blog from the future.

In order to create our own custom proxies, first we need to know how proxies work.

Back in March 2014, Garage4Hackers had a live stream with Gynvael Coldwind.

I thought I had found the Windows iptables with Portproxy but I was wrong.

I have decided to learn Go (or Golang).

These notes have moved to https://parsiya.io/dev/go/.

I have talked a lot about this and that but have done nothing in action.

It's been a while since Burp part four and I want to continue writing these.

I finally decided to cave in and take advantage of the Amazon Cloudfront free TLS certificate.

In this post I will talk about using Burp as part of a proxy chain.

I have made a good number of changes to the Hugo-Octopress theme.

Previous parts: Burp Tips and Tricks for Non-Webapp Testing - Part 1: Interception and Proxy Listeners Burp Tips and Tricks for Non-Webapp Testing - Part 2: History, Intruder, Scanner and More Almost there, I will get through Options and Extender in this…

In part1 I talked about some of Burp's functionalities with regards to testing non-webapps.

Burp is not just used for web application testing.

You will find those commands and tips that I need from time to time (and usually forget when I need them).

I was writing another blog post and I realized that I keep repeating how to do the same things, so I decided to write some tutorial-ish things and just link them.

This is a re-hash of my answer on Hugo forums about creating a custom archive page.

In my previous post I talked about why I moved from Octopress to Hugo.

As you may have noticed (well no one reads this so I am fine), I have moved from Octopress to Hugo.

This is a simple tutorial about .NET Remoting.

Finally we are at part 3 of proxying Hipchat.

In part1 I talked about identifying Hipchat endpoints and promised to discuss proxying the application.

This is a slightly different version of a series of blog post that I wrote on our internal blog about proxying.

Thick client assessments come in different flavors.

Update: I have migrated the blog to Hugo and I do not use this anymore.

This post is part one of a two part internal blog entry on creating a Pintool for an assessment.