Now that I got pointed to this twice (see “Via” below), I need to get one so I can play with it: [Wayback/Archive] GitHub – i-am-shodan/USBArmyKnife: USB Army Knife – the ultimate close access tool for penetration testers and red teamers.
Via:
Archive for the ‘Security’ Category
DeCENC is yet another way to beat Amazon, Netflix video DRM • The Register
Posted by jpluimers on 2025/09/12
From a while ago. I wonder what the current state is.
[Wayback/Archive] DeCENC is yet another way to beat Amazon, Netflix video DRM • The Register
- [Wayback/Archive] .:: Phrack Magazine ::. which is also a great example on how to publish an article including diagrams in ASCII
- [Wayback/Archive] DeCSS for Linux and DVD
--jeroen
Share this:
Posted in Development, Encryption, Media, Media Streaming, Power User, Security, Software Development | Leave a Comment »
vx-underground (@vxunderground) / Twitter
Posted by jpluimers on 2025/09/09
I thought I had been living under a stone for decades when I bumped into vx-underground (@vxunderground) / Twitter
The largest collection of malware source code, samples, and papers on the internet.
Password: infected
That appeared to be untrue as vx-underground, ran by a team of volunteers, started in 2019 ([Archive] web.archive.org/web//vx-underground.org) right when a few crisis in my life came together at the same time.
So here are the links for my archive as they are great content for both Red Teams and Blue Teams on many things cyber security related:
Share this:
Posted in Blue team, Pen Testing, Power User, Red team, Security | Leave a Comment »
In case I need a small 5-port managed switch that can do port-mirroring: GS305E | Easy Smart Managed Essentials Switch | NETGEAR Support
Posted by jpluimers on 2025/08/13
[Wayback/Archive] GS305E | Easy Smart Managed Essentials Switch | NETGEAR Support which can do many-to-one port mirroring.
This is a newer and cheaper hardware revision than the:
- GS105Ev2 (which is managed and can do port-mirroring, and is confusingly sold as GS105E-200) which in Germany already is end-of-life
- GS105Ev1 (which is unmanaged and cannot do port-mirroring and is confusingly sold as GS105E-100) which is end-of-life but still sold
Via [Wayback/Archive] Everyone Should Have One of These – EASY Packet Capture! – YouTube who explains very well why you need a switch that can do port-mirroring, then recommends the GS105E but forgets to mention:
- there are different revisions of the GS105E with the above drawbacks
- there is GS305E
Related:
Share this:
Posted in Blue team, Communications Development, Development, Ethernet, Hardware, Internet protocol suite, Network-and-equipment, Power User, Red team, Security, Software Development, TCP, UDP | Leave a Comment »
html – What can cause Chrome to give an net::ERR_FAILED on cached content against a server on localhost? – Stack Overflow
Posted by jpluimers on 2025/08/07
On my research list [Wayback/Archive] html – What can cause Chrome to give an net::ERR_FAILED on cached content against a server on localhost? – Stack Overflow
The reason what that back then this would fail (but worked in Firefox and Safari, and because I was in a hurry I didn’t research further): [Wayback/Archive] https://www.office.com/
This site can’t be reached
The webpage at https://www.office.com/ might be temporarily down or it may have moved permanently to a new web address.
ERR_FAILED
Thanks [Wayback/Archive] Mason Wheeler and [Wayback/Archive] Joel Davey.
Details:
Share this:
Posted in Chrome, Communications Development, Development, Encryption, HTTP, https, HTTPS/TLS security, Power User, Security, TCP, TLS, Web Browsers, Web Development | Leave a Comment »
GitHub – minvws/horsebattery: A password generator inspired by https://xkcd.com/936/
Posted by jpluimers on 2025/07/22
[Wayback/Archive] GitHub – minvws/horsebattery: A password generator inspired by https://xkcd.com/936/
Inspiration: [Wayback/Archive] xkcd: Password Strength
Curated Dutch word list: [Wayback/Archive] horsebattery/config/nl/word-list.txt at main · minvws/horsebattery · GitHub
Via: [Wayback/Archive] Discord
--jeroen
Share this:
Posted in Development, Passwords/manages, PHP, Power User, Scripting, Software Development | Leave a Comment »
HackErOpUit – agenda with hacker/maker/security related conferences and meetings in or near The Netherlands; add your own event through a pull request
Posted by jpluimers on 2025/07/08
Pull-requests via [Wayback/Archive] GitHub – revspace/hackeropuit: HackErOpUit.nl website
An overview of hacker-events in and around the Netherlands
Patches welcome ;) (Both in the code as with new events)
The different kinds of events are at [Wayback/Archive] hackeropuit/events at master · revspace/hackeropuit · GitHub.
Via: [Wayback/Archive] Angry Nerds – de privacy en security podcast. -> [Wayback/Archive] Discord | #houd-toch-je-feedback | Angrynerds Podcast
--jeroen
Share this:
Posted in Development, Hardware, Power User, Security, Software Development | Tagged: houd | Leave a Comment »
VISA payments needed JavaScript enabled for https://secure5.arcot.com/
Posted by jpluimers on 2025/07/04
While paying with VISA card for some services, I had to explicitly enable JavaScript for the https://secure5.arcot.com/ domain which looks suspicious and is titled [Wayback/Archive] location.hostname
Before I enabled JavaScript for it, I did some querying around as at first it looked like a man-in-the-middle-attack. I wasn’t the only one, as this was going on since 2013 (but I didn’t notice it earlier as I only disabled JavaScript for most sites in 2022): [Wayback/Archive] Verified by Visa and arcot.com function like a man-in-the middle attack – Jason Pearce (found via [Wayback/Archive] arcot obo – Google Search)
JavaScript there is needed so VISA card can use Arcot to be the intermediate between VISA and the web-site:
Share this:
Posted in Power User, Security | Leave a Comment »
Of interest – GitHub – t-d-k/LibreCrypt: LibreCrypt: Transparent on-the-fly disk encryption for Windows. LUKS compatible.
Posted by jpluimers on 2025/06/17
Of interest – despite the known issues and LUKS workaround through WSL – mainly as the majority was written in Delphi: [Wayback/Archive] GitHub – t-d-k/LibreCrypt: LibreCrypt: Transparent on-the-fly disk encryption for Windows. LUKS compatible.
Found when researching TFrame – What is the accepted way to use frames in Delphi? – Stack Overflow.
Related: Read the rest of this entry »
Share this:
Posted in Delphi, Development, Encryption, Power User, Software Development, Windows Development | Leave a Comment »
PayPal domains to enable JavaScript for
Posted by jpluimers on 2025/06/16
I have JavaScript disabled in my browser and had to enable it for these domains to get PayPal working:
Without the first and last, Captchas nor 2FA would work.
[Wayback/Archive] Netify.ai: PayPal – Domains, IPs and App Information (which I found via [Wayback/Archive] domains used by paypal – Google Search) only lists primary domains (not subdomains like the above) and contains both paypal.com and paypalobjects.com.
The list is by Netify.ai, the company having Deep Packet Inspection products around the open source engine [Wayback/Archive] pcbaldwin/netifyd: The open-source Netify DPI engine is a standalone deep packet inspection agent that provides a flexible and affordable DPI solution for gateways, firewalls, SD-WAN, WiFi, IoT and other OEM devices..
–jeroen
Share this:
Posted in 2FA/MFA, Authentication, Power User, Security | Leave a Comment »
The Wiert Corner - irregular stream of stuff 