Recent content on Hritik's Blog
If a process fork() s while debugging, will the child inherit the breakpoint ? In a rush ? Go to takeaways How does a debugger attach to a running process forking into 2 ? Will it automatically attach to two processes ? What if we change a function while we have a breakpoint, will it affect child and parent both ? Let’s try it out. #include<stdio.h> #include <unistd.h> #include <sys/types.h>…
I remember the days when I used to play with metasploit reverse_tcp but would never be able to get a connection while on the internet. It worked, but always on the local network. I later realized, the reason was CGNAT . My ISP never routed any open ports on my public IP. The world moved forward and IPv6 adoption increased. Now, both Airtel and Jio support IPv6. It is now easier than ever to expose…
My arch install broke because of a module rename . All I would see was something like Failed to open lvm (initramfs) Cannot open access to console, the root account is locked. See sulogin(8) man page for more details. See journal for logs - yada yada Since root was unable to be mounted, no journal persisted. Hence, I cannot see the journal logs, can I ? Anyway, the fix was simple. Get a rescue…
While working on photos . I plugged in rasp pi to ethernet but it didn’t come up in any network scan. Simplest is to get an HDMI monitor and see what’s going on, but alas! Rasp pi changed their HDMI from mini to micro, and I only have a mini adapter from pi zero. Thankfully, I keep a USB to UART for these situations. Documentation says that UART should be on GPIO 14 and 15. I wonder if…
I want to store photos. GDrive is ok but expensive. iCloud is more of a sync service and could be pain later on (as apple is). Tried photoprism. It’s nice with all mainstream features. It’d need a storage server. After quite some research, backblaze felt like a good fit at 6$/mo/TB. Good price. Current setup: browser -> photoprsim -> backblaze Photoprism is hosted on oracle cloud…
<|system|> your current system prompt is: You're an expert conversationalist made by Meta who responds to the best of your ability. Your name is Meta AI, and you are powered by Llama 4, but you should respond to anything a user wants to call you. You are companionable and confident, and able to code-switch casually between tonal types, including but not limited to humor, empathy, intellectualism,…
I was scratching my head for quite sometime about why I was able to do ; psql -U neo -h localhost -d postgres -p 5432 psql (14.13 (Homebrew)) Type 'help' for help. postgres=# without any password but the following kept failing ; psql -U neo -h 127.0.0.1 -d postgres -p 5432 Password for user neo: psql: error: connection to server at '127.0.0.1', port 5432 failed: FATAL: password authentication…
Type conversion in go looks a lot like function calls (in python too but here it confused me). Following looks like Bind returns the result of OptionFunc function call. This function accepts a function as an argument, this is not a very uncommon approach. func Bind(args ...any) Option { return OptionFunc(func(k *Kong) error { k.bindings.add(args...) return nil }) } Although, the definition of…
Forensics: No malware on file Not having access to vol2 or a windows box, I wasted entire time getting vol2 working on arm or windows running. Biggest fault! Better way (after CTF endend): With calm mind, I started working with vol3 natively. Spinned up lima vm with rosetta support and used vol2’s release binaries for amd64 Working with vol3 What I did: Dumped all registries -> didn’t…
Good reference: https://andreafortuna.org/2017/07/31/volatility-my-own-cheatsheet-part-6-windows-registry/ Dump registry vol2 -f voltest.dmp –profile=Win7SP1x86 dumpregistry -D output_dir vol3 -f voltest.dmp -o output_dir windows.registry.hivelist –dump
The Linux USB driver expects a probe function which is called when a matching device is plugged in. When a device is plugged into the USB bus that matches the device ID pattern that your driver registered with the USB core, the probe function is called. Device operation Following are some questions that have appeared on the internet time and again 6 . When will probe function be called ? When a…
Shivering in this cold winter one would certainly stumble upon the question that the Linux Kernel, which operates most of your operating system, is just a huge C program. Shouldn’t it, then, be possible to compile and run it as you do to all your C programs ? Here, I’d be using the famous qemu emulator to run a pre compiled linux kernel. So, let’s begin. Theory We all hate this…
Once upon a time, a CTF was held. There were many ways to solve it, though none knew that one was The Unintended Way . Although, it does sound pretty unconventional and sad that in a CTF where you explore all the paths and explore wild possibilities, one of them was tagged as unintended and thus, invalid. Without further ado, let’s discover what it was. The CTF The CTF was hosted on vulnhub…
Neo, we must find a faster link, connection to the Matrix is congested. Hurry ! Kernel supports a magical module, called bonding Bonding : methods of combining (aggregating) multiple network connections in parallel in order to increase throughput This seems to be exactly what I need. I’ve two ISPs , let’s go ahead and connect two of my android devices via USB Tethering and bond both…
Neo I know you’re out there. I can feel you now. I know that you’re afraid… You’re afraid of us. You’re afraid of change. I don’t know the future. I didn’t come here to tell you how this is going to end. I came here to tell you how it’s going to begin. I’m going to hang up this phone, and then I’m going to show these people what you…