RSSAmplifier

Blog

Joakim Uddholm - Blog

Personal blog by Joakim Uddholm

joakim.uddholm.comRSS feed ↗65 posts

Latest posts

Ripping DVDs

Here is how I rip my old DVDs in 2026

Fix for BankID on Murena eOS

Fix for BankID on Murena eOS

Removing uninstallable apps from Android via adb

How to remove those annoying uninstallable Google apps via adb

Setting up keepassxc with yubikey

I use keepassxc to store my passwords. Up until now for my setup I have been using Password + Keyfile as the database credentials, where keyfile has been mostly used as a salt rather than an actual secrets. I store a backup of this keyfile in various online accounts. Because of this I've never been entirely comfortable storing the passwords anywhere online, as it would only require cracking my…

Resetting HP M15w

Trying to find instructions on how to reset the M15w printer to set up a new wifi connection was annoying enough that I wrote it down.

Claiming a microsoft shorturl for an easy phish

**tl;dr;** Microsoft has an internal use shorturl service at **go.microsoft.com** that can be enumerated for hijackable links. It might be useful for you as a red teamer if you want to phish windows users.

Bitbucket CSRF on SSH Add Key Endpoint via superdomain cookie

In October 2022 I found a pretty specific CSRF vulnerability on Bitbucket Server (the self hosted version). Since it has now been patched, here are the details.

kms.nhp.gov.in rooted via syncthing

In May last year (2022) I found and disclosed a vulnerability on a subdomain of nhp.gov.in. Using an exposed syncthing admin interface, I was able to gain root SSH access to the server by syncing the `/root/.ssh` directory.

Quick way to scrape websites

In this post I want to show a quick way to scrape websites using the python package requests-html and firefox's developer tools.

Python Logging Cheatsheet

Cheatsheet of how to use python's built in logging

Exfiltrating Past CSP Directives

An example of using Google Analytics to exfiltrate past CSP directives on HackerOne

Revoking a PGP Key from MIT's Key Server

Instructions on how to revoke your public PGP key from MIT's Key Server.

Yubikey OpenPGP Setup for SSH and Commit Signing

Some disorganized notes on how I set up my yubikey for SSH auth and git commit signing.

Setting up RAID1 with mdadm

How I setup RAID1 on a basic USB sata docking station.

Setting up Thinkpad dockd

I finally bought myself a dock for the thinkpad I use as my main computer. After using the new dock for some time I noticed that the screen would be stuck displaying black after leaving the system locked for a longer time. Looking around I found dockd which fixes that problem and automates the switching of display layouts.

Setting up Brother DS620 on Linux

I got myself a scanner so that I could scan some paperwork. Payslips, tax declarations. I went for the Brother DS620 because of it's small size and the fact that it had linux drivers available. Here's how I set it up on Ubuntu and a small cheatsheet for the future.

Replacing Cronjobs with Systemd Timers

How to create systemd timers, that are in my opinion better than cronjobs.

Github Docker Packages Username Fix

A quick workaround for those of us with upperchase characters in our Github username when using Github Packages.

Reverting to a Previous Kernel

Short how-to revert a linux kernel on Ubuntu 18.04

Recovering a RAID 1 Drive in Linux

The steps I took to mount a RAID1 drive in Linux.

Veracrypt Cheatsheet

Short cheatsheet for using Veracrypt

PulseAudio cheatsheet

PulseAudio seems to be the default sound system for many linux distributions, including mine. I often have to look up the commands when I want to e.g. change output ot a different device, such as my big 'TV'-screen. Pulse seems to be a very powerful system in terms of configurability, I won't cover much of it. My interactions with Pulse is only as a desktop user.

Webhotel using traefik, docker and ssh

Where I build a static site webhotel using traefik, docker, ansible and good old ssh.

How to add custom alert sounds to Gnome (Ubuntu 18.04)

I'm currently doing my yearly-ish reinstall of my OS. This time doing a fresh install of just basic Ubuntu with gnome, having previously used Ubuntu Mate for the past 1.5-ish years. I like to customize my OS slightly, to give it more personality. For this reinstall I decided to name my OS `mimikyu` after my favourite pokemon. Anyhow, during the process of tweaking I had the idea of making the…

Quick EC2 IPv6 Tutorial

A quick howto configure IPv6 for a single EC2 instance.

How to copy a MongoDB Database

A short howto for copying all data from one MongoDB database to another.

Terraforming S3 Policies to an EC2 IAM Role

All the buzzwords and AWS abbreviations! Another post where I just want to note down something I thought was cool.

What I Learned Last Year at Work

It's almost 2019, and what better time to reminisce a bit and remember what I've learned the past year.

A Microservices Guideline

_I originally wrote this document for my work, where we were deep into a microservices architecture. The goal was to create a set of guidelines to be used when developing a new service. This way we could ensure some consistent quality for the code, as well as have

Linux Services Cheatsheet

I originally wrote this rough cheatsheet for documentation at work, where I had to deal with different linux flavours' ways

A hacky way to disable express-jwt expiry for development

I'm developing a small app in my free time using nodejs and express, while trying out Auth0

A small Golang webservice Dockerimage

Here is the Dockerfile for a small golang webservice I wrote, which I managed to make quite

IMAP Tools for migrating email accounts

I wrote some tools to help with migrating an existing imap account from one server to another, so that you can keep your emails when you

Tagging docker images differently based on git branch

At work we use `git flow` to organize our git repositories. `master` is the production branch,

CI/CD CV

Just for fun, I decided to try making a CI/CD pipeline for my CV. This post will be a bit rough and jumbled, sorry about that, probably would have been better to split this into several posts. Anyhow, here's how I did it.

Working locally with Docker containers

Over the weekend I wrote a small tool that will automatically update the /etc/hosts file with your running docker container.

Custom Application Launchers in Linux

Just a small howto for creating new application launchers in ubuntu, and I guess other similar distros. These will

Graphing the Ferryman Problem

Hello again, blog. It's been a while. I had a lot of topics that I wanted to write about the past year, but in the end I never managed to finish and publish anything. I think I'm generally ok with that though.

Stored XSS via Swish Transaction

Last week I went to the cinema with some friends. My friend paid for the ticket so I decided to use

tamperfree

I'd like to write about a part of what was my master thesis project. For my thesis I wrote about a mostly theoretical whistleblowing system.

Easier Authentication for your Mobile Apps

Signing in to your mobile apps should be easier in my opinion than having to type

Setting up a Tor hidden service

As part of my thesis, I'm looking at using Tor for an anonymous submission system.

Revisiting the Free Wifi on Destination Gotland

I'm on the boat from Gotland again after having spent a week there with my

Teaching

*Disclaimer: Some thoughts on reason, ethics, and teaching. There is probably more refined philosophy on this somewhere, but I figured I would write down my thoughts. This post might be subject to change in the future. I might also move these types of posts to a separate feed/blog to separate it from computer science stuff.*

Url Secrets

Found a neat little hack using 'World Wide Web URLs'

Apache HTTPS Configuration

Here are the virtualhost configuration I use to set up https on apache for a

Rolling my own Certificate Authority

I'm about to deploy a small sideproject I've been coding the past 2 weeks and

SSLStrip

Continuing with the theme of wifi attacks, tonight I'm looking at the SSLStrip tool.

Ettercap, Arpspoof and DNSSpoof Examples

I'm spending the night learning about the tool ettercap. May as well write down what I learn for future reference.

Enumerating Cinema Tickets

This is a hack I disclosed around a year ago to the company in question. It involves the company SF, which has a