Andreas Happe

Published in EMSE, arxiv version: Penetration-testing is crucial for identifying system vulnerabilities, with privilege-escalation being a critical subtask to gain elevated access to protected resources.

I am using an (now 5 years old) Xiaomi Mi Mix 3 as a backup phone for travelling.

Published in TOSEM, arxiv version: Enterprise penetration-testing is often limited by high operational costs and the scarcity of human expertise.

arxiv version: Large Language Model (LLM) - based Automated Program Repair (APR) systems are increasingly integrated into modern software development workflows, offering automated patches in response to natural language bug reports.

arxiv version: This paper presents a critical examination of the surprising efficacy of Large Language Models (LLMs) in penetration testing.

Presented at DeMeSSAI'25 in Venice, Italy, arxiv version: Large Language Models (LLMs) have emerged as a powerful approach for driving offensive penetration-testing tooling.

Now that I have a minimal home server running, I thought it would be good idea to monitor temperature, disk usage and such.

By now, I am using Proton Drive for cloud data storage and Proton Mail as my primary mail service.

I am running a home server for a while now.

I am using Fedora Silverblue as one of my main desktops.

I’ve been using a mini-computer as home-server for the last couple of years.

Adding Plan-and-Execute Planner All sources can be found in our github history.

Simplify our Tool-Calling Agent through create_react_agent LangGraph has some amazing Prebuilt Components, one of them is the create_react_agent function that allows you to hughely simplify creating new tool-using agents.

Improving Configuration Handling, esp. for Tools While being quite happy that the initial prototype worked within hours, its code was very prototype-y, i.e., much of its configuration was hard-coded.

The first parts of this series were about getting more done while at work as well as making it easier to switch from work into leisure mode.

While the initial experiment focused upon productivity, the main goal of this series is to improve my work/life balance.

Last winter I was lucky to enroll in the so-far best lecture of my PhD studies: From Surviving to Thriving: Crafting your good personal Life by the great Geraldine Fitzpatrick.

Presented at FSE'23 in San Francisco, US, arxiv version: Offensive security-tests are a common way to pro-actively discover potential vulnerabilities.

Presented at FSE'23 in San Francisco, US, arxiv version: The field of software security testing, more specifically penetration testing, is an activity that requires high levels of expertise and involves many manual testing and analysis steps.

TL;DR WSL2 seems to be one big lolbin when it comes to EDR Scenario/Background During a recent assumed-breach pen-test assignment I was stranded as a low-level user on a fully-updated Windows 10 Enterprise system (10.0.19045) including a deployed CrowdStr…

During a recent assumed-breach pen-test assignment I ran into a problem: the customer had an up to date Windows Active Directory environment, CrowdStrike was rolled out as an EDR and a dedicated Incident Response Team was monitoring for alerts.. and I nee…

During a recent security assignment I came upon a projects folder stored on a Microsoft Active Directory server and accessible thought the network (SMB/CIFS).

So a customer of mine thought about ordering a Red Team Assessment and wanted me to go through their local network beforehands — no need to make it too easy for the red teamers.

So I’ve been using a Raspberry Pi 4b+ together with a WaveShare LTE Modem as 4G router/access-point for my home network setup.

AppSec includes all tasks that (hopefully) introduce a secure software development life cycle to development teams.

Recently I had a couple of customers that needed some guidance about secure software development.

During a recent presentation on HTTP Header Security I was asked for a “simple” flow chart with directions which headers can be used without too many problems.

Given that I’ve spent more time in my flat (hello, COVID-19) I also spent more time looking at my book shelf.. and wasn’t too happy with it: in hindsight, some of the books I’ve read are way to pretentious and the books I remember as life-changing were mo…

So I am back at teaching web application security.

After I’ve bought a new and fast 1TB SSD, it’s time to setup my aging Desktop again.

Now that wireguard will be part of the upcoming Linux 5.6 Kernel it’s time to see how to best integrate it with my Raspberry Pi based LTE-Router/Access Point Setup.

2019 was a year in which I expanded my comfort zone and forced myself to face some fears.

After 15 or so years I’m finally closing down my own company (it was a small one-person vehicle, in Austrian Einzelpersonenunternehmen or EPU).

The last weeks I’ve tried to improve upon my Raspberry Pi based LTE-Router/Access Point.

Nach dem guten Feedback meiner Studenten auf meine Web Application Security Vorlesung lies ich mich überreden, im Wintersemester 2019 einen Teil einer weiteren Vorlesung zu halten: SecOps — Secure Operating Systems, also quasi Security Themen für Administ…

From coding..

Diese Unterlagen entstanden zeitgleich während einer von mir gehaltenen Vorlesung an dem Technikum/FH Wien.

Sometimes I want to work on client assignments (penetration-tests) from home, if I do that I am using my company VPN so that all traffic is routed thorugh their public IP address (which is white-listed by the client).

So I held a lecture on “Web Application Security” for the FH/Technikum Wien last spring and wrote a small booklet for my students (partially because I wanted to avoid discussions during the final exam).

I spent some time playing around with various LTE-options for my Raspberry Pi Access Point/Router setup.

Most of you (and there are a couple of thousands of you) come for my tech-posts, but it seems that some of you get lost reading my non-techie posts too.

In one of my last experiments I replaced my crappy T-Mobile (now Magenta) 4G modem/access point with an OpenWRT-based cheap travel router and a 4G USB LTE modem.

Recently I upgraded from my “old” Motorola/Lenovo G6 plus to a Xiaomi Mi Mix 2s.

My LTE internet connection (70 Mbit downstream, 15 MBit upstream) came with a combined Huawei B315s LTE modem/access point.

During a recent assignment the customer server was utilizing a WebSocket for some notification transport, part of my assignment was to fuzz-test the used WebSocket (and the messages transported over it).

During a recent pen-test I stumbled upon a JSON Web Token(in short: JWT) based authorization scheme.

There’s power in switching mental models.

So my company moved to a new building which uses HID RFID cards for access control.

This year was good work- and health-wise, but bad when it comes to money and relationships.

Wireguard is recently making a splash as human-configurable low-overhead alternative to OpenVPN and IPSec.