This is a longer description about your blog.
As someone who's spent most of their career deep in systems, protocols, and low-level tooling, it's often painfully obvious that the slowest part of any workflow isn’t always the network or the hardware. Sometimes, it’s the person at the keyboard. So this week, I ran a quick experiment to measure just that: How efficiently can a human type out 32 bytes of binary data, using different encoding…
Over the couple of days I've been fighting with sluggish internet performance from my office. The first thing I do, is the same as you, I start pinging. There is 0% packet loss and latency is a steady 10 ms. So where is the sluggishness coming from? I test the whole network stack from top to bottom and then back up again, router, vpn, switch, virtual network ... everything checks out at 0% packet…
Migrating VMs inside a proxmox cluster is easy. But what to do when you need to migrate a VM to another proxmox cluster? With a bit of command line, the rest is easy as long as you're using ZFS. Even for the largest VMs the amount of down time required is mimimal. #####################################Example scenario ######################################Source cluster host: PVEA#Source cluster VM…
The task of sniffing traffic from an app on Android x86 ranges from trivial, to very complicated. The difference comes down to the various anti-sniffing techniques employed by the app and or the Android OS itself. This guide will walk you through the process starting with the most trivial scenario, all the way to the most complex. Scenario 1: ProxyDroid Before diving into the complexities of…
What do you do when you have a questionable device that you'd like to connect to your switch in order to get it online, but you don't fully trust it and want to isolate it from your other devices? Or what if you don't trust any of your devices to talk to each other but you still want to give them internet access? The textbook solution is to create separate VLANs and firewall them from each other…
GSM community edition comes with an artificial restriction to the amount of RAM your VM may use. There is a way to remove it Boot up using SystemRescueCd or similar mount /dev/sda1 /mnt vi /mnt/grub/grug.cfg remove all references to mem= (you can also remove CPU limits while at it) save reboot
The words "email" and "security" have never mixed, but some things are just too ridiculous to be left as they are. There are several ways to spoof email, each with their own countermeasures: Sender email address -> DKIM and SPF Sender email display name -> Solution below While researching ways to fix this, I came across different methods, ranging from database lookups of valid names to looking for…
Piping SMTP commands directly into nc doesn't work very well. What's needed is a pause before each command. Something like this cat "mail.txt" |while read L; do sleep "1"; echo "$L"; done | "nc" -C -v "smtp.example.com" "25"
Install Android x86 (I used 8.1r3) Configure with virtwifi Long press to access advanced menu's proxy settings Proxy traffic to BurpSuite or similar Install frida-server on Android x86 follow https://www.frida.re/docs/android/ frida-ps -aiH 192.168.x.x #find the target’s application identified ex: com.company.myapp download file bypass.js into current directory frida -H 192.168.x.x -f…
Recently I saw a demo of AI technology that could count the number of people in a security camera video feed. I thought it was pretty cool and started Googling “how did they do that?”. First I came across scientific papers that require you to have an advanced math degree to understand, but soon I stumbled across a whole other class of open source projects that are pre-packaged and ready to go with…