Recent content in posts on djnn@localhost
Oh you thought I was done, did you ? 
 Last time I wrote about USB/IP , we discussed an issue I
found in the Linux kernel related to USB-IP, but it was fixed before I could
actually finish it, and at least confirm RIP control. 
 So I went back through my notes, and noticed I hadn’t actually fired one of the
entries, a server-side TOCTOU in stub_recv_cmd_unlink . The note…
Hey, it has been a while. :) 
 A coworker had been poking at USB/IP recently and I figured I’d take a look at the kernel
side of it. After all, it’s just there . The protocol tunnels USB over TCP,
no authentication on the wire, and the client kernel just parses whatever bytes
the server sends. That is the kind of attack surface I will absolutely spend a weekend…
Recently, I came across this project (initially called clawdbot , renamed moltbot ).
On paper, it is a cool project. It feels like the kind of thing you expect from
all those AI agents. It’s open-source, free, maintained mostly by one guy. 
 I know I’ve had strong opinions about AI things, but I want
to positively outline the work this dude made, by himself, and that he…
Hello again, today I’d like to share on a project I’ve been working on, on
and off for a long time. 
 Every now and then, I would pick up again this project but I think it is now
in a releasable state. First, let’s see a
 short demo , from yours truly. 
 As you can see, it is a userland keylogger, written in C. Let’s go over key
features, how they…
Recently, I experimented a bit with different Operating Systems.
Maybe that could be an interesting post for the future. During my various tests, I
wanted to keep working on projects , of course. 
 That means that I had at some point the need to setup a VM for Windows 11.
I usually pick qemu , with virt-manager for these things as it is the most lightweight
and I don’t…
Until you know how they work, programs related to networking always kind of feel like magic,
at least to me. However, I have written enough code to know that there is no such
thing as magic, just clever ideas that are properly implemented. 
 Some things I work on at $work touch a bit on the side of networking, and that drove
me to be interested in the ICMP protocol, particularly…
Recently, I’ve had the extreme pleasure of designing and setting up the challenges
for the OSINT category of the Tengucon CTF. 
 If you want to learn more about Tengucon, you can do so here: https://tengucon.org/ 
 Sadly, I was not in attendance for the event, but I was there in spirit. It was
my first time designing and implementing CTF challenges from scratch, so I…
A report was recently published by an AI-research company called Anthropic .
They are the ones who notably created Claude , an AI-assistant for coding. Personally, I don’t use it but that is besides the point.
Before we start, it’s important to say I don’t have anything against them, or AI in general. I do have some documented concerns but I am not “Anti-AI”,…
Hey, it has been a while. :) 
 Today, I am sharing a write-up for a Linux lab, available on Hackthebox with an easy difficulty level. It took me about 2 hours to complete it. I could have finished it earlier, but I am not interested in rushing and my VPN is unfortunately quite slow, because of the region I live in. 
 Anyways, let’s get started. 
 from recon to foothold 
 The…
Apologies for the late release, I recently got sick and could not be asked to write or deploy things. 
 Anyways, let’s get started. Today, we’re doing tombwatcher , which is a Medium-level windows box on HackTheBox.
It actually took me a while to finish it (especially to get root), because of my lack of experience with ADCS. 
 As is common with most Windows boxes, we get…
Hello again, my friends. :) 
 Today, I am sharing my notes on how I solved puppy.htb , a Medium-level box on HackTheBox. Like many, I have less experience with Windows Active Directory environments. We don’t use it at $work, and I am not focused on anything related to pentesting at the moment. I hope that, like for me, this will be a teachable moment for you. 
 Let’s start.…
Good morning, my friends. 
 Today, I am sharing a write-up on an easy-level Windows box, running with active directory.
If you don’t have any experience with certificates and authentication on AD, it can be challenging.
However, it is somewhat straightforward if you have a bit of experiecne. 
 recon 
 Let’s scan the network using nmap , as is common at the beginning…

 EDIT: a trustable journalist has posted an update here: https://x.com/koryodynasty/status/1979048385937121406 
 it is alledged the perpetrators are Chinese-affiliated, and possibly responsible of a
fire in a bunch of Korean datacenters too: https://www.news1.kr/local/moi/5927009 
 
 This is the second part of the investigation into KIMSUKI’s leak. 
 We had already…
Like many other “““hackers”””, I’ve always had a bit of a fascination for APTs.
If you have never heard the term APT , it means “Advanced Persistent Threat”.
They are computer engineers, often affiliated to governments, focused on pursuing
military objectives like intelligence collection, sabotage, etc. 
 Recently, one of them…
I have been trying to articulate these thoughts for a while. 
 What do you think is the main innovation behind LLMs ? I mean, really ?
What makes them a revolution for everyone ? 
 In my (humble) opinion, most people are misunderstanding what are LLMs great at.
Sometimes, people refer to LLMs as generative AIs . I think this term is misleading. 
 The strength of such algorithms…