News for hackers. Stuff that matters.

leonjza

Re:Sshole on Thursday November 05, 2026 @10:04AM (#50379987)
Managed to reproduce this, with a lab[0] you can play with.

[0] https://github.com/leonjza/sshhole-lab

Re:Gource: Software Version Control Visualization on Saturday January 04, 2025 @02:29AM (#42593143)
I have fond memories of parsing random things to pipe to gource as a younger me. The code is ancient, but here [0] was an experiment to get something like nmap (and other data) ready to feed to gource. Fun to watch indeed!

[0] https://github.com/leonjza/py2gource

Curious about this statement. Can you link to any reading I can do to learn more?
v3 just released with plenty of new features, optimizations and more! https://github.com/sensepost/gowitness/releases/tag/3.0.0
Creation is done by running migrations [1] (invoked via Laravel's artisan command line). Using the database is done via Models[2].

[1] https://github.com/firefly-iii/firefly-iii/tree/main/databas... [2] https://github.com/firefly-iii/firefly-iii/tree/main/app/Mod...

This is fun! I was curious about pulling something like this off in Golang, and wipped together a dirty PoC using Traefik's yaegi here [0]

[0] https://gist.github.com/leonjza/9d53b30a6b85ff837a27170a185a...

Re:Firecracker v1.0 Released on Monday January 31, 2022 @10:38AM (#30149137)
Happy to see the kernel init parameters fix land! For context, I used firecracker (very successfully) in a CTF, driven via a Discord bot.

One of the challenges I tried to build was one where a player would get access to the kernel commandline with the goal being that they should hack their way around the environment to get access to an encrypted disk. Unfortunately, that was when I get the now fixed bug[1].

[1] https://github.com/firecracker-microvm/firecracker/issues/27...

Re:Fixing stutters in Papers Please on Linux on Sunday January 02, 2022 @11:23AM (#29770033)
I really enjoyed the debugging process here, and am glad to have learnt about the -k flag which seems to only be available on systems with strace version 5.5, at least for me.

As for the patch (and my love for all things Frida [1]), I think a call to Intercerptor.replace() after locating the symbol with Module.getExportByName() [2] would make for a simpler patch (at the cost of installing Frida). For example:

  const sym = Module.getExportByName("lime.ndll", "SDL_SemWait");
  Interceptor.replace(sym, {
    onEnter: function() {},
    onLeave: function() {}
  });
[1] https://frida.re/

[2] https://frida.re/docs/javascript-api/#module

Re:Ask HN: Where are the Beautiful clean HTML/CSS templates? on Wednesday November 25, 2020 @05:50AM (#25207879)
Because I like the look, I typically end up "butchering" tabler[1]. Have used it on a few projects now.

[1] https://preview.tabler.io/

Re:Swift on Windows on Tuesday September 22, 2020 @04:41PM (#24559639)
I really hope this means a reworked iTunes / Music app for Windows soon.
Author here. The amount of data per QR depends on the QR size specified. If I remember correctly, its about 10 bytes per code in the default config (QR code size of 30). Transfer boilerplate is a few codes in the start to setup the conversation and a FIN like message at the end.