# am sharing (blogs) — RSS Amplifier Recent posts from the 2 feeds in the RSS Amplifier directory that cover am sharing. Page: Feed: --- ## [more usb fun](https://djnn.sh/posts/more_usb_fun/) _2026-05-22 · djnnvx@mailfence.com (djnn) · posts on djnn@localhost_ Oh you thought I was done, did you ? Last time I wrote about USB/IP , we discussed an issue I found in the Linux kernel related to USB-IP, but it was fixed before I could actually finish it, and at least confirm RIP control. So I went back through my notes, and noticed I hadn’t actually fired one of the entries, a server-side TOCTOU in stub\_recv\_cmd\_unlink . The note… ## [two months too late (linux kernel 1day)](https://djnn.sh/posts/2months2late/) _2026-05-19 · djnnvx@mailfence.com (djnn) · posts on djnn@localhost_ Hey, it has been a while. :) A coworker had been poking at USB/IP recently and I figured I’d take a look at the kernel side of it. After all, it’s just there . The protocol tunnels USB over TCP, no authentication on the wire, and the client kernel just parses whatever bytes the server sends. That is the kind of attack surface I will absolutely spend a weekend… ## [the impossible task of securing AI agents](https://djnn.sh/posts/moltbot/) _2026-01-28 · djnnvx@mailfence.com (djnn) · posts on djnn@localhost_ Recently, I came across this project (initially called clawdbot , renamed moltbot ). On paper, it is a cool project. It feels like the kind of thing you expect from all those AI agents. It’s open-source, free, maintained mostly by one guy. I know I’ve had strong opinions about AI things, but I want to positively outline the work this dude made, by himself, and that he… ## [making a keylogger for linux](https://djnn.sh/posts/linux_keylogger/) _2026-01-18 · djnnvx@mailfence.com (djnn) · posts on djnn@localhost_ Hello again, today I’d like to share on a project I’ve been working on, on and off for a long time. Every now and then, I would pick up again this project but I think it is now in a releasable state. First, let’s see a short demo , from yours truly. As you can see, it is a userland keylogger, written in C. Let’s go over key features, how they… ## [windows11 qemu notes](https://djnn.sh/posts/qemu_and_windows11/) _2026-01-17 · djnnvx@mailfence.com (djnn) · posts on djnn@localhost_ Recently, I experimented a bit with different Operating Systems. Maybe that could be an interesting post for the future. During my various tests, I wanted to keep working on projects , of course. That means that I had at some point the need to setup a VM for Windows 11. I usually pick qemu , with virt-manager for these things as it is the most lightweight and I don’t… ## [writing your own traceroute is surprisingly easy](https://djnn.sh/posts/traceroute/) _2025-12-14 · djnnvx@mailfence.com (djnn) · posts on djnn@localhost_ Until you know how they work, programs related to networking always kind of feel like magic, at least to me. However, I have written enough code to know that there is no such thing as magic, just clever ideas that are properly implemented. Some things I work on at $work touch a bit on the side of networking, and that drove me to be interested in the ICMP protocol, particularly… ## [Tengucon OSINT CTF](https://djnn.sh/posts/tenguctf-osint-solutions/) _2025-11-22 · djnnvx@mailfence.com (djnn) · posts on djnn@localhost_ Recently, I’ve had the extreme pleasure of designing and setting up the challenges for the OSINT category of the Tengucon CTF. If you want to learn more about Tengucon, you can do so here: https://tengucon.org/ Sadly, I was not in attendance for the event, but I was there in spirit. It was my first time designing and implementing CTF challenges from scratch, so I… ## [anthropic's paper smells like bullshit](https://djnn.sh/posts/anthropic-s-paper-smells-like-bullshit/) _2025-11-16 · djnnvx@mailfence.com (djnn) · posts on djnn@localhost_ A report was recently published by an AI-research company called Anthropic . They are the ones who notably created Claude , an AI-assistant for coding. Personally, I don’t use it but that is besides the point. Before we start, it’s important to say I don’t have anything against them, or AI in general. I do have some documented concerns but I am not “Anti-AI”,… ## [something about AI models (artificial.htb write-up)](https://djnn.sh/posts/artificial-htb/) _2025-10-25 · djnnvx@mailfence.com (djnn) · posts on djnn@localhost_ Hey, it has been a while. :) Today, I am sharing a write-up for a Linux lab, available on Hackthebox with an easy difficulty level. It took me about 2 hours to complete it. I could have finished it earlier, but I am not interested in rushing and my VPN is unfortunately quite slow, because of the region I live in. Anyways, let’s get started. from recon to foothold The… ## [ADCS shenanigans (tombwatcher.htb write-up)](https://djnn.sh/posts/adcs_shenanigans_tombwatcher/) _2025-10-12 · djnnvx@mailfence.com (djnn) · posts on djnn@localhost_ Apologies for the late release, I recently got sick and could not be asked to write or deploy things. Anyways, let’s get started. Today, we’re doing tombwatcher , which is a Medium-level windows box on HackTheBox. It actually took me a while to finish it (especially to get root), because of my lack of experience with ADCS. As is common with most Windows boxes, we get… ## [Zero-Persistence E2EE (Sponsored)](https://crawlproof.com/a/99F2G8WmUFjH) _2025-10-11 · **Sponsored**_ End-to-end encryption with client-side WebCrypto and volatile memory. ## [bloodhound spray and pray (puppy.htb write-up)](https://djnn.sh/posts/bloodhound_spray_and_pray/) _2025-09-28 · djnnvx@mailfence.com (djnn) · posts on djnn@localhost_ Hello again, my friends. :) Today, I am sharing my notes on how I solved puppy.htb , a Medium-level box on HackTheBox. Like many, I have less experience with Windows Active Directory environments. We don’t use it at $work, and I am not focused on anything related to pentesting at the moment. I hope that, like for me, this will be a teachable moment for you. Let’s start.… ## [certificates, certificates ~ fluffy.htb write-up](https://djnn.sh/posts/certificates_fluffy.htb/) _2025-09-22 · djnnvx@mailfence.com (djnn) · posts on djnn@localhost_ Good morning, my friends. Today, I am sharing a write-up on an easy-level Windows box, running with active directory. If you don’t have any experience with certificates and authentication on AD, it can be challenging. However, it is somewhat straightforward if you have a bit of experiecne. recon Let’s scan the network using nmap , as is common at the beginning… ## [kim-cyka continued](https://djnn.sh/posts/kim-cyka-continued/) _2025-08-22 · djnnvx@mailfence.com (djnn) · posts on djnn@localhost_ EDIT: a trustable journalist has posted an update here: https://x.com/koryodynasty/status/1979048385937121406 it is alledged the perpetrators are Chinese-affiliated, and possibly responsible of a fire in a bunch of Korean datacenters too: https://www.news1.kr/local/moi/5927009 This is the second part of the investigation into KIMSUKI’s leak. We had already… ## [kim-cyka](https://djnn.sh/posts/kim-cyka/) _2025-08-21 · djnnvx@mailfence.com (djnn) · posts on djnn@localhost_ Like many other “““hackers”””, I’ve always had a bit of a fascination for APTs. If you have never heard the term APT , it means “Advanced Persistent Threat”. They are computer engineers, often affiliated to governments, focused on pursuing military objectives like intelligence collection, sabotage, etc. Recently, one of them… ## [some thoughts on LLMs](https://djnn.sh/posts/on-llms/) _2025-02-17 · djnnvx@mailfence.com (djnn) · posts on djnn@localhost_ I have been trying to articulate these thoughts for a while. What do you think is the main innovation behind LLMs ? I mean, really ? What makes them a revolution for everyone ? In my (humble) opinion, most people are misunderstanding what are LLMs great at. Sometimes, people refer to LLMs as generative AIs . I think this term is misleading. The strength of such algorithms…