dustyfresh
Re:Cloudflare Reverse Proxies Are Dumping Uninitialized Memory
on Friday February 24, 2017 @02:39PM (#13726979)
Hacked this together to determine which ones out of the list are potentially using cloudflare reverse proxies. You could also send an HTTP request to them and look for the cloudflare-nginx Server header.
https://gist.github.com/dustyfresh/4d8d364ca4c6da465cfc7d817...
Re:Show HN: OneSite – Free, unlimited web hosting with cPanel and supp...
on Saturday October 08, 2016 @07:37PM (#12669225)
Do you guys have a bug bounty?
Re:How to DDoS Your Own Website with Python
on Tuesday August 09, 2016 @07:26AM (#12253798)
Neat! How is this distributed if it is only your machine doing the work?
Dynamic phishing with Python
OpenCanary honeypot Docker image
Shady shells (backdoored PHP backdoors)
KeRanger ransomware checker and removal script
Getting a reverse shell on a Seagate personal cloud NAS
Re:Experienced Developers in Texas Needed
on Thursday January 21, 2016 @10:33AM (#10945833)
Could you tell us a little more about your idea? Nothing too specific obviously but at least what industry your idea is for and a little more background would be nice. I'm based out of Austin and have tons of friends in both Austin and Houston that have worked on a lot of really awesome projects in the past. Maybe I could help, but would like some more information :)
OnionIRC – easy IRC Tor hidden service in a docker container
Re:The security of wired.com is bad because User Enumeration is possible
on Tuesday November 10, 2015 @12:37PM (#10540819)
This is a WordPress specific problem... Not really that big of a deal. Sure it could be useful for a bad actor to use this method to define a username to initiate brute force attacks against..but it's a WordPress problem -- not specific to just Wired.
HoneyPress – WordPress honeypot in a docker container with WP-CLI
Changing Tor exit node by clicking a button (Node/NW.js)
Samy Kamkar's OpenSesame
Pwning the utility company
Re:How I Hacked Telegram’s “Encryption”
on Monday February 23, 2015 @01:54PM (#9096137)
The attack vector wasn't even through the Telegram application but depending on if you get access to disk or memory. Sure that's not hard to do...but it's still safe in-transit? A pretty interesting read, but I'm not seeing the leetness here.
Thwarting WordPress XML-RPC and GHOST Attacks
Cracking the Hadoop User Experience
Turntupinthe.club
WARNING: Do not click if epileptic.
Re:Ask HN: Compensation in Austin area?
on Friday September 19, 2014 @05:11PM (#8342511)
I live in Austin currently. Could you provide more information on your background and what you do, and what your skill set is like? Thats really what is the main factor when negotiating pay. There are a ton of opportunities in Austin, and the startup scene here is great. However, without knowing what you do is hard for me or others to really give you the answer you are looking for.
Autopwning cPanel shared servers
Cloudera acquires big data encryption company Gazzang
The dangers of incremental hostnames
Shoutkey.com is insecure by design
Windows XP end of life – the fear
Store your crypto-coin address in a DNS record
Don't commit private keys to github
[PHP] Dlinkd D-Link backdoor checker
http://staypimp.in/butts/dlinkd
This script will scan any backdoor'd dlink deviced and tell you if they're vulnerable. Wrote it for testing and educational purposes only :)