jonaslejon
Re:Why does SSH send 100 packets per keystroke?
on Friday January 23, 2026 @03:10AM (#46729843)
Memories! I was at the hacking conference HAL2001 and listening to Dug Song and Solar Designer, who were talking about their SSH timing analysis: https://download.openwall.net/pub/advisories/OW-003-ssh-traf...
Time flies
Re:Build a simple fuzzer: Part 1
on Friday September 13, 2024 @12:25PM (#41532690)
Nice tool! Will check it out. I have used jdam in the past to fuzz JSON: https://gitlab.com/michenriksen/jdam
How to Inspect TLS Encrypted Traffic
Re:RegreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems
on Monday July 01, 2024 @03:37PM (#40849714)
OpenSSH 9.8p1 was released July 1, 2024 according to https://www.openssh.com/releasenotes.html#9.8p1
Critical Security Flaw in the WooCommerce Payments Plugin
Wpsec.com Docker WordPress Vulnerability Scanner Command Line Client
Wpsec.com Python Command-Line Client
Eight-Year Study Shows the Dark Side of WordPress Plugins
Security in WordPress Plugin Development
Re:Bitwarden: Generate a Username
on Wednesday May 04, 2022 @09:29AM (#31260082)
This was quite funny:
if name == "boring_wozniak" /* Steve Wozniak is not boring */ { goto begin }
Discovering Vulnerabilities in WordPress Plugins at Scale
Backdooring WordPress Using PyShell
Re:SSH Bastion Host Best Practices
on Friday January 14, 2022 @03:41AM (#29932025)
I personally use OSSEC for File Integrity Monitoring. And it has also actually caught an intruder that modified some PHP-code on a webserver. The attacker forgot to use the prefix @ in the PHP-code so a new error message was sent to the logfile and reported by OSSEC.
Security Features We Wish Were Included in WordPress
WordPress and the new vulnerability Trojan Source
Re:Masscan: TCP port scanner, scanning entire Internet in under 5 minutes
on Tuesday September 28, 2021 @02:27PM (#28685882)
You need to have a really good relationship with your ISP and get their acknowledge prior to the scanning
Malicious PDF Generator
WooCommerce Unauthenticated SQL Injection Vulnerability
WordPress PHPMailer Vulnerability Analysis
WordPress XXE Vulnerability in Media Library – CVE-2021-29447
Re:I am stepping down from Perl Steering Council and Core
on Monday April 12, 2021 @09:50AM (#26779401)
I don't really understand the thread. This guy X writes about the harassments and then someone replies and asks about the release versions?