gehaxelt · HackerTrans

Submissions

Ask HN: What are open-source tools companies use?

1 pointsby gehaxelt4 anni fa0 comments

Measuring a Tor Hidden Service's Idle Traffic

0day.work

1 pointsby gehaxelt6 anni fa0 comments

Credentials hiding in plain sight or how I pwned your HTTP auth

0day.work

1 pointsby gehaxelt6 anni fa0 comments

Files on Web Servers Part I: History Files

0day.work

1 pointsby gehaxelt7 anni fa0 comments

Pwning your web server the easy way or why exposing –/.ssh/ is a bad idea

0day.work

71 pointsby gehaxelt7 anni fa55 comments

Wordpress InfiniteWP Client Admin Authentication Bypass

0day.work

1 pointsby gehaxelt7 anni fa0 comments

Open Redirects in Misconfigured Mod_rewrite Rules (PoC for CVE-2019-10098?)

0day.work

1 pointsby gehaxelt7 anni fa0 comments

Proof of Concept for "viewing unauthenticated posts" in Wordpress 5.2.3

0day.work

2 pointsby gehaxelt7 anni fa0 comments

PoC for “Apache Httpd XSS in mod_proxy error page (CVE-2019-10092)”

0day.work

1 pointsby gehaxelt7 anni fa0 comments

CVE-2019-11360: BufferOverflow in iptables-restore v1.8.2

0day.work

2 pointsby gehaxelt7 anni fa0 comments

A Crash in Unsquashfs

0day.work

1 pointsby gehaxelt7 anni fa0 comments

An example why NAT is NOT security

0day.work

3 pointsby gehaxelt7 anni fa0 comments

Performance of Iodine over DNS-over-HTTPS

0day.work

28 pointsby gehaxelt7 anni fa9 comments

CVE-2019-1000032: Memory corruption / DoS in nanosvg

0day.work

1 pointsby gehaxelt7 anni fa0 comments

Dockerized Tor Onion Services with Vanity v3 Tor Addresses

0day.work

2 pointsby gehaxelt7 anni fa0 comments

Show HN: Routes-apply.sh – Apply routes similar to iptables-apply

github.com

1 pointsby gehaxelt8 anni fa0 comments

How to configure PXE network booting for Kali Linux

0day.work

3 pointsby gehaxelt8 anni fa0 comments

Tunneling all traffic over DNS with a SOCKS proxy

0day.work

3 pointsby gehaxelt8 anni fa0 comments

Scanning the Alexa Top 1M for Git Daemons

0day.work

1 pointsby gehaxelt8 anni fa0 comments

Parsing the .DS_Store file format

0day.work

2 pointsby gehaxelt8 anni fa0 comments

comments

gehaxelt

3 anni fadiscuss

It would be great if Github and other large providers could start using SSHFP records [0].

[0] https://www.rfc-editor.org/rfc/rfc4255.html

gehaxelt

7 anni fadiscuss

Good points!

I've updated the post.

Thanks!

gehaxelt

7 anni fadiscuss

Yup, you're right on that one.

I don't think I explicitly said that one should use iodine + DoH to bypass captive portals, but sorry if that somehow was implied.

The blogpost was just intended to be an experiment to compare the performance :-)

gehaxelt

9 anni fadiscuss

Hi,

thanks, I've updated the post!

gehaxelt

9 anni fadiscuss

Hey,

I cross-posted the question on SO [0] and got an interesting answer!

[0] https://stackoverflow.com/questions/47351447/how-to-merge-of...

gehaxelt

9 anni fadiscuss

Hi,

I just rechecked with [1] and you seem to be right.

I'll update the blogpost in a second. Thanks for the hint!

[1] https://httpd.apache.org/docs/current/upgrading.html

gehaxelt

9 anni fadiscuss

Hello HN,

here's one of the blogpost's authors. Although it has been a while since we published the blogpost, I'll try to answer any questions or listen to any suggestions.

gehaxelt

9 anni fadiscuss

Hi, one of the authors here.

I knew about dvcs-ripper, but thought that implementing another variant might be fun and let me learn about git internals.

Does a simple `git clone` really work? I just tested it and it failed:

``` $> git clone http://x.domain.tld/ fatal: repository 'http://x.domain.tld/' not found

$> git clone http://x.domain.tld/.git/ fatal: repository 'http://x.domain.tld/.git/' not found ```

And yes, the post's background is a CTF challenge that blocked a simple `git clone`.

gehaxelt

9 anni fadiscuss

Nice catch :)

I thought the the amount of forks and stars warrants a short writeup.

gehaxelt

9 anni fadiscuss

The script seems to ship with a rundimentary webserver by default, so I don't see a reason to wrap gunicorn et al. around it?

However, you're right that overwriting the source is a possible attack vector.

gehaxelt

9 anni fadiscuss

Hi,

I asssumed that the script would not be restarted, but you're totally right.

Thanks for the comment :)