Friday, September 13, 2024

Stuff

Lately, I've been tightening my own personal feedback loops. And working out. I've also been thinking about how sometimes it can be positive to forget things.

Wednesday, July 3, 2024

A Taxonomy of Communicative Modes

While lurking on the internet, I stumbled across a post from 2019 by @literalbanana on Twitter/X outlining different modes of communication.

Sunday, May 26, 2024

Using Reflection in Go

Have you ever been writing Go and needed to quickly find all the possible functions or fields you can use with a particular instance of a call?

Tuesday, April 9, 2024

Knowledge vs Information

One way to conceptualize the difference between knowledge and information is this: knowledge involves some metric of computational difficulty to arrive at, while mere information lacks this property.

Tuesday, November 7, 2023

DMARC

Lately I've overheard some people discussing email spoofing with regard to organizations that don't implement DMARC. Namely, "APTs" taking advantage of organizations that don't utilize Domain-based Message Authentication, Reporting and Conformance.

Monday, October 9, 2023

Enumerating TLS Certificates with jq and Bash

Doubling back to share some more notes about web application security adjacent stuff. This is a bash script for reconnaissance that uses some tooling from Project Discovery - mapcidr and tlsx - in combination with jq and Bash, to enumerate TLS certificates.

Friday, September 15, 2023

Using Bash to Sort IPs by Subnet Uniqueness

This is a helpful Bash script to parse IP addresses by the uniqueness of their subnets. This can be quite helpful in various scenarios.

Thursday, September 14, 2023

Binary, IPv4, and Subnets

The IPv4 protocol which we broadly (but not totally) use today rests on an addressing system that was designed in the 1970s and formally published in 1980.

Tuesday, September 5, 2023

The Etymology of 'Deadline'

The word 'deadline' has a popular etymology story around 19th century prison culture. The explanation of the meaning behind the word 'deadline' often goes something like this — as many etymologists and US dictionaries frequently cite it:

Saturday, September 2, 2023

Walking the EPROCESS Structure with Windbg

In a previous blog post, I covered how when a process is loaded, it is assigned a Process Environment Block (PEB) and Thread Environment Block. But this is only part of the story, and part of a larger picture.

Friday, September 1, 2023

Tradeoffs of PInvoke and Marshaling

Today I learned that PInvoke and marshaling have more tradeoffs than I naively considered. In terms of performance engineering, PInvoke and marshaling can be disadvantageous.

Tuesday, August 29, 2023

Life of a Windows Process

In a previous post, I covered a bit about how Windows Processes are initialized. But how does process creation work in Windows? Let's explore a bit further into Windows processes.