Andreas Happe

Lazily creating an HTTP/HTTPS interception proxy with network-manager and mitmproxy

This year seems to bring a lot of changes: I’ve switched employers after staying on/off at a research center or the last twelve years.

Recently I’ve found an old post-it with guidelines I wrote myself a couple of years back, two of those stood out: make mistakes don’t buy stupid stuff Seems like I haven’t been the most consistent person back then.

Update 2017: Sadly I found out (thanks due to the comments on this blog post) that using port-share does not encapsulates subsequent traffic in normal TLS.

I have a quite simple setup: Fedora 23 on my Desktop, Ubuntu 16.04 on my Notebook and a YubiKey thrown into the mix.

One important part of the European Prismacloud project is dissemination: make ordinary people understand some of our cryptographic directives.

Keeping a good security and privacy is tough work.

Firejail describes itself as a SUID program that reduces the risk of security breaches by restricing the running environment of running programs.

I have just received my OSCP exam success notification.

A project I’m involved with has a traditional distributed client-server architecture: multiple servers are interconnected, clients connect to one more servers.

Pathogen was the first vim plugin management system that I’ve known of.

Full-disclosure: I was asked by PacktPublishing to provide a review of Penetration Testing with BackBox by Stefan Umit Uygur.

My blog has a history of migrations.

After a successful penetration test a re-test is performed.

How to combine an reverse proxy (nginx) running on the host with virtualized aplication workers

How to use convert an KVM image into a LXC container

How to use virt-install to install new virtual machines within libvirt/kvm

How to setup an rogue access point and do ssl interception using KDE and BURP

How to setup a rogue access point with a transparent HTTP(s) proxy

Yesterday was this year’s “Akademikerball” in Vienna.

It’s weakness.

Yeah, let’s make some new year’s resolutions so that I can feel bad breaking them.

With the year’s end comes the time for reviews and cleanups.

We’re living in a world of indulgence and seem not to cherish the small (or larger) daily treats anymore.

How to setup the Fake S3 gem to create a local fake S3 server (for testing purposes)

wicked_pdf allows generating PDFs from ruby on rails, for free!

Using encryption to make git handle un-trusted remote storage server

Encrypted incremental backup to clouds/ssh hosts using duplicity

Trying to use two s3-based storage methods that provide transparent encryption and compression

Penetration testing

How to encrypt most of your communication data on the internet

How to transparently encrypt hard drives/USB sticks/etc.

Howto forward port 3000 to port 80 under Linux.

Howto change owner of all tables of a database (in postgresql)

Moving OctoPress to Amazon S3 is easy, but how's the performance?

How I operate

Building a mini-ITX high-performance desktop that would fit into a shoebox

wicked_pdf allows generating PDFs from ruby on rails, for free!