honoki - Network

Wait what? I was going for a more obvious mistake by fishing for the wrong answer 40, I don’t even understand why/where the logic went...

Wait what? I was going for a more obvious mistake by fishing for the wrong answer 40, I don’t even understand why/where the logic went wrong here. #failgpt

If you feel like it's been a long time since you marveled at the beauty of a song, you wanna give this a try: the Cinema Paradiso Love...

If you feel like it's been a long time since you marveled at the beauty of a song, you wanna give this a try: the Cinema Paradiso Love Theme (you'll know it when you hear it) as performed by Pat Metheny and Charlie Haden.

https://open.spotify.com/track/5lsR6wuL7T7vR5IOZwPaEc?si=c1e4d4975e544bb4

@stibmivb what does this mean?

@stibmivb what does this mean?

https://www.nytimes.com/2024/09/19/nyregion/citi-bike-scam-nyc.html?smid=nytcore-ios-share&referringSource=articleShare&sgrp=c-cb&ngrp=mnp&pvid=737A949B-AD28-4559-9F1C-91FC554B6FB3This...

https://www.nytimes.com/2024/09/19/nyregion/citi-bike-scam-nyc.html?smid=nytcore-ios-share&referringSource=articleShare&sgrp=c-cb&ngrp=mnp&pvid=737A949B-AD28-4559-9F1C-91FC554B6FB3

This is such an interesting read. Hacker mindset on the streets of New York. 🤩

Oh please…

Oh please…

I'm not sure *why* this is the case. Could be some QoS magic? Or just saturation on another network layer, maybe. Or is it DNS?

I'm not sure *why* this is the case. Could be some QoS magic? Or just saturation on another network layer, maybe. Or is it DNS?

I'm noticing that when I browse on a heavy-load shared wifi network and speeds are really low, things drastically improve when I enable...

I'm noticing that when I browse on a heavy-load shared wifi network and speeds are really low, things drastically improve when I enable ExpressVPN on its Lightway protocol.

Now *there's* a good reason for a VPN subscription.

Updated the #BBRF dashboard to include:- URL routing (e.g. bbrf.me/#/program_name/domains)- clickable IPs/domains to fetch and display...

Updated the #BBRF dashboard to include:
- URL routing (e.g. bbrf.me/#/program_name/domains)
- clickable IPs/domains to fetch and display documents
- JSON syntax highlighting
- some JS cleanup

https://github.com/honoki/bbrf-dashboard/

Changes are live on https://bbrf.me

I had the bug report ready to send and all. A lesson in humility.

I had the bug report ready to send and all. A lesson in humility.

Spent all weekend finding a beautiful 3-step chained open redirect to exploit a bug I've been ogling for months, only to find out I...

Spent all weekend finding a beautiful 3-step chained open redirect to exploit a bug I've been ogling for months, only to find out I forgot about missing CORS headers blocking the entire chain. Ouch. #bugbounty

Travelling to #oxford #uk this week, what shouldn’t I miss?

Travelling to #oxford #uk this week, what shouldn’t I miss?

I wrote a Burp extension to spin up a DigitalOcean droplet based on an OpenVPN configuration file and route traffic through it via a SOCKS...

I wrote a Burp extension to spin up a DigitalOcean droplet based on an OpenVPN configuration file and route traffic through it via a SOCKS proxy.

Would be nice to hear some feedback about this!

https://github.com/honoki/burp-digitalocean-droplet-openvpn

#burp #bugbounty #tools

The NYT spelling bee is a good reminder that if you keep on trying – even when you’re sure it can’t be done – you can end up...

The NYT spelling bee is a good reminder that if you keep on trying – even when you’re sure it can’t be done – you can end up cracking the solution.

I find these types of daily puzzle games are very compatible with the hacker mindset, and always am inspired to get back to an “impossible” bug when I find the solution.

Happy birthday to all the privacy-conscious people on the internet! 🎈

Happy birthday to all the privacy-conscious people on the internet! 🎈

Just signed up for 1 year subscription of Ivory for Mastodon to further incentivize myself to move (and stay) away from the dumpster fire...

Just signed up for 1 year subscription of Ivory for Mastodon to further incentivize myself to move (and stay) away from the dumpster fire that is Twitter.

I’m looking forward to sharing more of my bug bounty tales on here, and maybe find time for a couple more writeups.

Let me know if (like me) you’re lurking this site, and maybe we can reconnect. ☺️

Omg #WordleWordle 898 2/6⬛⬛⬛🟩⬛🟩🟩🟩🟩🟩WordleBotSkill 79/99Luck 80/99

Omg #Wordle

Wordle 898 2/6

⬛⬛⬛🟩⬛
🟩🟩🟩🟩🟩

WordleBot
Skill 79/99
Luck 80/99

Started experimenting with cloud-config this week. I've now got a 124-line YAML file that completely sets up my scanning VPS from...

Started experimenting with cloud-config this week. I've now got a 124-line YAML file that completely sets up my scanning VPS from scratch in a few minutes.

That's including a working DNS/HTTP logger auto-configuring all required DNS records, all my custom scripts, nuclei templates, BBRF scripts, etc.

Pretty happy with how this is going.