Security research, field notes, and practical experiments
Independent technical notes by Willis Vandevanter.
I was researching something else and thought this was a cool way to execute a command through the open method in ruby:
| |
The key is starting the open with pipe. For example,
| |
Or to exec and print the …
OXML is a common document format; think docx (Microsoft Word Document), pptx (Microsoft Powerpoint), xlsx (Excel Spreadsheet), etc.
An OXML document is a zip file containing XML files and any media files. When the document is rendered, the rendering library …
I seem to find open LDAP servers on the Internet more often than I should. Here are some notes on using ldapsearch
| |
nmap includes a script to gather info from a LDAP root-dse …
gumbler is a script I wrote to search through git commits and introduced in the blog post “Searching Through Git Commits”. Recently I wanted to run Gumbler …
gumbler is a script I wrote to search through git commits. Examples from github are discussed below.
A gitignore file is used to specify files that …
An XML Entity testing cheatsheet. Testing was done using an older vulnerable version of nokogiri. In IRB you can require previous versions of gems. Certain techniques (e.g. XInclude) may require additional settings in Nokogiri.
XML Headers:
| |
A hostname with an IPv6 address is stored as a AAAA resource record in DNS (see AAAA record). There are many DNS hostname bruteforcing tools, personally I …