Archive for the ‘Software Development’ Category
Posted by jpluimers on 2024/12/05
For my link archive as this is environment variable override trick to override DLL loading is not just limited to executables shipping with Windows, but also with other products (likely: virus scanners that run privileged); another alternative is running a local process serving the WebDAV protocol.
Read the rest of this entry »
Posted in Development, Power User, Security, Software Development, Windows, Windows 10, Windows 11, Windows Development | Tagged: DEFCON30 | Leave a Comment »
Posted by jpluimers on 2024/12/04
Need to write a tool for this that sets/clears the ………… flag in the PE .EXE header.
Officially it is for this:
[Wayback/Archive] IMAGE_FILE_HEADER (winnt.h) – Win32 apps | Microsoft Learn
- IMAGE_FILE_UP_SYSTEM_ONLY
- 0x4000
|
The file should be run only on a uniprocessor computer. |
In practice, this sets the affinity to 1 single CPU core (which is kind of random, and could change each time you start the executable).
This is ideal for code that is known for causing trouble executing on multiple cores, or – more importantly – to disallow core-switching for programs that give best performance when executed on a single core.
Via: [Wayback/Archive] Thread by @0gtweet on Thread Reader App – Did you ever hear about IMAGE_FILE_UP_SYSTEM_ONLY flag in NtHeader->FileHeader->Characteristics of an exe file?
Read the rest of this entry »
Posted in Development, Software Development, Windows Development | Leave a Comment »
Posted by jpluimers on 2024/12/04
Interesting for both red teams and blue teams: [Wayback/Archive] Hijack Libs
This project provides an curated list of DLL Hijacking candidates. A mapping between DLLs and vulnerable executables is kept and can be searched via this website. Additionally, further metadata such as resources provide more context.
Read the rest of this entry »
Posted in Blue team, Development, Power User, Red team, Security, Software Development, Windows Development | Leave a Comment »
Posted by jpluimers on 2024/12/03
Het gebruik van Bitly is netjes vermeld: [Wayback/Archive] Privacyverklaring | Mazda
Bitly: URL-verkortingsdienst en linkbeheerplatform; dienstverlener: Bitly, Inc, 139 Fifth Avenue, 5th Floor, New York, NY 10010, USA; website: https://bitly.com; privacybeleid: https://bitly.com/pages/privacy.
Dat is belangrijk, want URL-shorteners zijn een risico op bijvoorbeeld:
- De daadwerkelijke doel-URL is niet op voorhand zichtbaar of duidelijk
- De doel-URL kan achteraf worden gewijzigd, dus waar je nu op uitkomt is niet noodzakelijkerwijs waar je in de toekomst op uitkomt
- Er kan user-tracking plaatsvinden op het niveau van de URL-shortener
- Ze worden veel gebruikt om malware te verpreiden (juist ook omdat de doel-URL makkelijk aanpasbaar is)
- In veel omgevingen worden URL-shorteners om bovenstaande redenen geblokkeerd
--jeroen
Posted in Development, GDPR/DS-GVO/AVG, LifeHacker, Power User, Privacy, Web Development | Leave a Comment »
Posted by jpluimers on 2024/12/03
Fron a while ago but still relevant [Wayback/Archive] Is it Pokémon or Big Data?.
It is a cool experiment to test your own knowledge or for fun to assess recruiters or candidates (;
And it is open source too:
Read the rest of this entry »
Posted in Cloud, Cloud Development, Conference Topics, Conferences, Development, Event, Fun, Infrastructure, LifeHacker, PokemonGo, Power User, Software Development | Tagged: bigdata | Leave a Comment »
Posted by jpluimers on 2024/11/27
Posted in Development, Hardware, Internet, IPv4, Network-and-equipment, Power User, Scripting, Software Development | Tagged: cyberwarrior, infosec, networkbasics, networks, networks4hackers, subnetting | Leave a Comment »
Posted by jpluimers on 2024/11/22
Somehow this post missed the schedule and for a long time I forgot to properly checked for “missed schedule” posts.
Back in 2021, suddenly systems with speedtest-cli threw a [Wayback/Archive] ValueError: invalid literal for int() with base 10: ” by tzwickl · Pull Request #768 · sivel/speedtest-cli after accessing the speedtest.net servers.
Around 7-8 April, 2021 the speedtest.net/speedtest-config.php XML configuration suddenly had changed the value for the XPath expression /settings/server-config/@ignoreids from being a list of integers into empty, see the archived files below.
Read the rest of this entry »
Posted in Development, JavaScript/ECMAScript, Python, Scripting, Software Development, XML/XSD, XPath | Tagged: 768, 769 | Leave a Comment »