41554 blogs · [ { "id": "01a0876c-78f6-7350-ae56-ddc5e8946682", "title": "Vibe coding: supply chain insights", "url": "https://diablohorn.com/2026/08/23/vibe-coding-supply-chain-insights/", "published_at": "2026-08-23T17:31:32+00:00" }, { "id": "01a0876c-78f6-7350-ae56-ddc5e98b31d3", "title": "Old skool tales on initial access", "url": "https://diablohorn.com/2026/04/23/old-skool-tales-on-initial-access/", "published_at": "2026-04-23T16:21:36+00:00" }, { "id": "01a0876c-78f6-7350-ae56-ddc5ea54a50f", "title": "Playing with the LANL ARCS Data Sets", "url": "https://diablohorn.com/2026/04/19/playing-with-the-lanl-arcs-data-sets/", "published_at": "2026-04-19T17:33:47+00:00" }, { "id": "01a0876c-78f6-7350-ae56-ddc5eb278405", "title": "Observations on AI generated Remote DuckDB via HTTP with mTLS", "url": "https://diablohorn.com/2026/03/22/observations-on-ai-generated-remote-duckdb-via-http-with-mtls/", "published_at": "2026-03-22T15:33:27+00:00" }, { "id": "01a0876c-78f6-7350-ae56-ddc5eb9b28a9", "title": "[QuickPost] DuckDB NDJSON force all columns", "url": "https://diablohorn.com/2026/03/19/quickpost-duckdb-ndjson-force-all-columns/", "published_at": "2026-03-19T21:07:52+00:00" }, { "id": "01a0876c-78f6-7350-ae56-ddc5ec3d3f46", "title": "Invisible security requires friction first", "url": "https://diablohorn.com/2026/02/27/invisible-security-requires-friction-first/", "published_at": "2026-02-27T21:39:55+00:00" }, { "id": "01a0876c-78f6-7350-ae56-ddc5ed249afb", "title": "Recon your patents with GenAI?", "url": "https://diablohorn.com/2025/12/07/recon-your-patents-with-genai/", "published_at": "2025-12-07T22:47:25+00:00" }, { "id": "01a0876c-78f6-7350-ae56-ddc5ed886130", "title": "YOLO detect security cameras", "url": "https://diablohorn.com/2025/10/26/yolo-detect-security-cameras/", "published_at": "2025-10-26T20:51:53+00:00" }, { "id": "01a0876c-78f6-7350-ae56-ddc5ee878115", "title": "Emotions as human detection & defence", "url": "https://diablohorn.com/2024/05/22/emotions-as-human-detection-defence/", "published_at": "2024-05-22T18:21:06+00:00" }, { "id": "01a0876c-78f6-7350-ae56-ddc5ef23946b", "title": "Random thoughts on physical security measures", "url": "https://diablohorn.com/2024/05/21/random-thoughts-on-physical-security-measures/", "published_at": "2024-05-21T21:21:33+00:00" }, { "id": "01a0c507-e545-7198-aa19-0bae0902b481", "title": "PowerShell cmdline parsing/tokenization", "url": "https://diablohorn.com/2024/04/01/powershell-cmdline-parsing-tokenization/", "published_at": "2024-03-31T22:24:20+00:00" }, { "id": "01a0c507-e545-7198-aa19-0bae0925550c", "title": "Analyzing Pipedream / Incontroller with MITRE/STIX", "url": "https://diablohorn.com/2024/03/17/analyzing-pipedream-incontroller-with-mitre-stix/", "published_at": "2024-03-17T14:10:15+00:00" }, { "id": "01a0c507-e545-7198-aa19-0bae093bbef1", "title": "Lateral movement: A conceptual overview", "url": "https://diablohorn.com/2023/08/22/lateral-movement-a-conceptual-overview/", "published_at": "2023-08-22T20:55:34+00:00" }, { "id": "01a0c507-e545-7198-aa19-0bae0a2313c2", "title": "Opinion: Time is crucial when building secure components or infrastructures", "url": "https://diablohorn.com/2023/04/09/opinion-time-is-crucial-when-building-secure-components-or-infrastructures/", "published_at": "2023-04-09T14:00:49+00:00" }, { "id": "01a0c507-e545-7198-aa19-0bae0a8de4ce", "title": "OBS: Presentation & slides side by side", "url": "https://diablohorn.com/2022/11/25/obs-presentation-slides-side-by-side/", "published_at": "2022-11-25T14:45:11+00:00" }, { "id": "01a0c507-e545-7198-aa19-0bae0b84f85e", "title": "Parsing atop files with python dissect.cstruct", "url": "https://diablohorn.com/2022/11/17/parsing-atop-files-with-python-dissect-cstruct/", "published_at": "2022-11-16T23:32:53+00:00" }, { "id": "01a0c507-e545-7198-aa19-0bae0bd4d128", "title": "Baby steps into MITRE Stix/Taxii, Pandas, Graphs & Jupyter notebooks", "url": "https://diablohorn.com/2022/10/30/baby-steps-into-mitre-stix-taxii-pandas-graphs-jupyter-notebooks/", "published_at": "2022-10-30T18:23:45+00:00" }, { "id": "01a0c507-e545-7198-aa19-0bae0c79ecb5", "title": "Lockbit’s bounty: consequences matter", "url": "https://diablohorn.com/2022/09/18/lockbits-bounty-consequences-matter/", "published_at": "2022-09-17T22:26:43+00:00" }, { "id": "01a0c507-e545-7198-aa19-0bae0d1410a6", "title": "Generating network connection information for experimentation purposes", "url": "https://diablohorn.com/2022/09/11/generating-network-connection-information-for-experimentation-purposes/", "published_at": "2022-09-11T20:31:20+00:00" }, { "id": "01a0c507-e545-7198-aa19-0bae0e02242a", "title": "Three ways to hack an ATM", "url": "https://diablohorn.com/2022/05/14/three-ways-to-hack-an-atm/", "published_at": "2022-05-14T10:02:18+00:00" }, { "id": "01a0c518-9be2-7090-b103-102cf87dd0a0", "title": "Writing a zero findings pentest report", "url": "https://diablohorn.com/2022/04/23/writing-a-zero-findings-pentest-report/", "published_at": "2022-04-23T17:09:47+00:00" }, { "id": "01a0c518-9be2-7090-b103-102cf8b458c9", "title": "Firewall analysis: A portable graph based approach", "url": "https://diablohorn.com/2022/04/09/firewall-analysis-a-portable-graph-based-approach/", "published_at": "2022-04-09T19:53:26+00:00" }, { "id": "01a0c518-9be2-7090-b103-102cf8e3e15c", "title": "More doing, less cyber", "url": "https://diablohorn.com/2021/11/07/more-doing-less-cyber/", "published_at": "2021-11-07T20:56:47+00:00" }, { "id": "01a0c518-9be2-7090-b103-102cf9740e9b", "title": "CSAW 2021, binary ninja & a haystack", "url": "https://diablohorn.com/2021/09/21/csaw-2021-binary-ninja-a-haystack/", "published_at": "2021-09-20T23:23:31+00:00" }, { "id": "01a0c518-9be2-7090-b103-102cf986c1c9", "title": "Pentesting: What I should have done", "url": "https://diablohorn.com/2021/04/24/pentesting-what-i-should-have-done/", "published_at": "2021-04-23T23:21:50+00:00" }, { "id": "01a0c518-9be2-7090-b103-102cf98efc22", "title": "Into the void: ramblings and thoughts", "url": "https://diablohorn.com/2021/04/15/into-the-void-ramblings-and-thoughts/", "published_at": "2021-04-14T22:25:39+00:00" }, { "id": "01a0c518-9be2-7090-b103-102cf9f4365f", "title": "[Part 2] Interactive and transferrable code risk visualization", "url": "https://diablohorn.com/2020/05/10/part-2-interactive-and-transferrable-code-risk-visualization/", "published_at": "2020-05-10T00:20:40+00:00" }, { "id": "01a0c518-9be2-7090-b103-102cfae1db8d", "title": "[Part 1] Experimenting with visualizations and code risk overview", "url": "https://diablohorn.com/2020/05/06/part-1-experimenting-visualizations-code-risk-overview/", "published_at": "2020-05-06T17:01:51+00:00" }, { "id": "01a0c518-9be2-7090-b103-102cfbc8891d", "title": "The fallacy of ‘manual work’ being faster", "url": "https://diablohorn.com/2020/04/27/the-fallacy-of-manual-work-being-faster/", "published_at": "2020-04-27T20:36:22+00:00" }, { "id": "01a0c518-9be2-7090-b103-102cfbe8b631", "title": "vysolator: vyos virtual network isolation", "url": "https://diablohorn.com/2020/03/28/vysolator-vyos-virtual-network-isolation/", "published_at": "2020-03-28T12:44:07+00:00" }, { "id": "01a0c523-999e-701b-a416-b6054421c515", "title": "Lessons learned on written social engineering attacks", "url": "https://diablohorn.com/2020/03/04/lessons-learned-on-written-social-engineering-attacks/", "published_at": "2020-03-04T07:53:28+00:00" }, { "id": "01a0c523-999e-701b-a416-b605442ffb15", "title": "Old Skool Red Team", "url": "https://diablohorn.com/2019/12/28/old-skool-red-team/", "published_at": "2019-12-28T20:11:21+00:00" }, { "id": "01a0c523-999e-701b-a416-b60544626e9a", "title": "Secure slack bot; An exercise in threat modeling", "url": "https://diablohorn.com/2019/11/18/secure-slack-bot-an-exercise-in-threat-modeling/", "published_at": "2019-11-17T23:01:55+00:00" }, { "id": "01a0c523-999e-701b-a416-b60544fc609d", "title": "Notes on ZFS / Solaris forensics", "url": "https://diablohorn.com/2019/09/01/notes-on-zfs-solaris-forensics/", "published_at": "2019-09-01T23:08:11+00:00" }, { "id": "01a0c523-999e-701b-a416-b6054521ff2a", "title": "Introduction to physical penetration tests", "url": "https://diablohorn.com/2019/07/21/introduction-to-physical-penetration-tests/", "published_at": "2019-07-21T21:40:17+00:00" }, { "id": "01a0c523-999e-701b-a416-b605458555a2", "title": "Introduction to analysing full disk encryption solutions", "url": "https://diablohorn.com/2019/05/21/introduction-to-analysing-full-disk-encryption-solutions/", "published_at": "2019-05-21T21:18:56+00:00" }, { "id": "01a0c523-999e-701b-a416-b60546246537", "title": "Remote NTLM relaying through meterpreter on Windows port 445", "url": "https://diablohorn.com/2018/08/25/remote-ntlm-relaying-through-meterpreter-on-windows-port-445/", "published_at": "2018-08-25T11:57:04+00:00" }, { "id": "01a0c523-999e-701b-a416-b60546930045", "title": "Creating a ram disk through meterpreter", "url": "https://diablohorn.com/2018/08/06/creating-a-ram-disk-through-meterpreter/", "published_at": "2018-08-06T15:47:32+00:00" }, { "id": "01a0c523-999e-701b-a416-b6054753e796", "title": "Presentation: Understanding & avoiding AV detection", "url": "https://diablohorn.com/2018/02/27/presentation-understanding-avoiding-av-detection/", "published_at": "2018-02-27T22:08:32+00:00" }, { "id": "01a0c523-999e-701b-a416-b60548502de8", "title": "Identify a whitelisted IP address", "url": "https://diablohorn.com/2018/02/04/identify-a-whitelisted-ip-address/", "published_at": "2018-02-04T16:54:23+00:00" }, { "id": "01a0c52f-2540-73d8-a322-c480a528e1cb", "title": "YARA for pentesters", "url": "https://diablohorn.com/2017/12/25/yara-for-pentesters/", "published_at": "2017-12-25T16:06:53+00:00" }, { "id": "01a0c52f-2540-73d8-a322-c480a5bad101", "title": "attacking encrypted systems with qemu and volatility", "url": "https://diablohorn.com/2017/12/12/attacking-encrypted-systems-with-qemu-and-volatility/", "published_at": "2017-12-12T19:14:38+00:00" }, { "id": "01a0c52f-2540-73d8-a322-c480a6554fc6", "title": "Port scanning without an IP address", "url": "https://diablohorn.com/2017/10/26/port-scanning-without-an-ip-address/", "published_at": "2017-10-26T21:43:01+00:00" }, { "id": "01a0c52f-2540-73d8-a322-c480a746b2eb", "title": "Understanding & practicing java deserialization exploits", "url": "https://diablohorn.com/2017/09/09/understanding-practicing-java-deserialization-exploits/", "published_at": "2017-09-09T20:01:28+00:00" }, { "id": "01a0c52f-2540-73d8-a322-c480a7ff81be", "title": "Brute forcing encrypted web login forms", "url": "https://diablohorn.com/2017/08/15/brute-forcing-encrypted-web-login-forms/", "published_at": "2017-08-15T23:31:13+00:00" }, { "id": "01a0c52f-2540-73d8-a322-c480a8c77fc2", "title": "Quantum Insert: bypassing IP restrictions", "url": "https://diablohorn.com/2017/05/21/quantum-insert-bypassing-ip-restrictions/", "published_at": "2017-05-21T17:34:01+00:00" }, { "id": "01a0c52f-2540-73d8-a322-c480a928edb6", "title": "Repurposing the HP audio key logger", "url": "https://diablohorn.com/2017/05/12/repurposing-the-hp-audio-key-logger/", "published_at": "2017-05-12T19:38:05+00:00" }, { "id": "01a0c52f-2540-73d8-a322-c480a9547f1f", "title": "Python raw sockets sniffing & pcap saving", "url": "https://diablohorn.com/2017/03/09/python-raw-sockets-sniffing-pcap-saving/", "published_at": "2017-03-09T23:26:20+00:00" }, { "id": "01a0c52f-2540-73d8-a322-c480a9989b5f", "title": "Win10 secure boot inside vmware fusion", "url": "https://diablohorn.com/2016/11/05/win10-secure-boot-inside-vmware-fusion/", "published_at": "2016-11-05T18:33:52+00:00" }, { "id": "01a0c52f-2540-73d8-a322-c480a9efa737", "title": "Meterpreter, registry & unicode quirk work around", "url": "https://diablohorn.com/2016/09/27/meterpreter-registry-unicode-quirk-work-around/", "published_at": "2016-09-27T22:00:30+00:00" }, { "id": "01a0c539-97e4-713b-a7a5-b673a89982a4", "title": "[python] Poor man’s forensics", "url": "https://diablohorn.com/2016/08/14/python-poor-mans-forensics/", "published_at": "2016-08-14T22:57:46+00:00" }, { "id": "01a0c539-97e4-713b-a7a5-b673a90ebc5e", "title": "Idea: Abusing Google DLP for NSA-style content searching", "url": "https://diablohorn.com/2016/03/01/idea-abusing-google-dlp-for-nsa-style-content-searching/", "published_at": "2016-03-01T20:57:46+00:00" }, { "id": "01a0c539-97e4-713b-a7a5-b673a9fbec3b", "title": "PowerShell overview and introduction", "url": "https://diablohorn.com/2016/02/06/powershell-overview-and-introduction/", "published_at": "2016-02-06T01:23:39+00:00" }, { "id": "01a0c539-97e4-713b-a7a5-b673aa67878e", "title": "pageant key extraction automated", "url": "https://diablohorn.com/2015/10/03/pageant-key-extraction-automated/", "published_at": "2015-10-03T21:36:06+00:00" }, { "id": "01a0c539-97e4-713b-a7a5-b673aa8080e9", "title": "Discovering the secrets of a pageant minidump", "url": "https://diablohorn.com/2015/09/04/discovering-the-secrets-of-a-pageant-minidump/", "published_at": "2015-09-04T08:52:16+00:00" }, { "id": "01a0c539-97e4-713b-a7a5-b673aadff202", "title": "Continuously rotating hashes", "url": "https://diablohorn.com/2015/03/28/continuously-rotating-hashes/", "published_at": "2015-03-28T22:45:26+00:00" }, { "id": "01a0c539-97e4-713b-a7a5-b673aba13fbe", "title": "Parsing the hiberfil.sys, searching for slack space", "url": "https://diablohorn.com/2014/12/10/parsing-the-hiberfil-sys-searching-for-slack-space/", "published_at": "2014-12-10T00:03:29+00:00" }, { "id": "01a0c539-97e4-713b-a7a5-b673abafc997", "title": "Writing your own blind SQLi script", "url": "https://diablohorn.com/2014/07/26/writing-your-own-blind-sqli-script/", "published_at": "2014-07-26T01:41:40+00:00" }, { "id": "01a0c539-97e4-713b-a7a5-b673ac5bac5b", "title": "Physical home security options", "url": "https://diablohorn.com/2014/07/13/physical-home-security-options/", "published_at": "2014-07-13T18:29:14+00:00" }, { "id": "01a0c539-97e4-713b-a7a5-b673ad3ce30c", "title": "Quick POC to mitm RDP ssl", "url": "https://diablohorn.com/2014/04/21/quick-poc-to-mitm-rdp-ssl/", "published_at": "2014-04-21T20:06:53+00:00" }, { "id": "01a0c542-e50e-71e5-b7c4-a327d9ce1023", "title": "[QP] Dumping the TrueCrypt second stage", "url": "https://diablohorn.com/2014/03/23/dumping-the-truecrypt-second-stage/", "published_at": "2014-03-23T21:56:25+00:00" }, { "id": "01a0c542-e50e-71e5-b7c4-a327dac2d2b3", "title": "[old] VMware vSphere client XML External Entity attack", "url": "https://diablohorn.com/2014/03/16/old-vmware-vsphere-client-xml-external-entity-attack/", "published_at": "2014-03-16T02:42:23+00:00" }, { "id": "01a0c542-e50e-71e5-b7c4-a327db60d711", "title": "Memory Zeroization: frustrating memory forensics", "url": "https://diablohorn.com/2014/03/16/memory-zeroization-frustrating-memory-forensics/", "published_at": "2014-03-16T02:32:07+00:00" }, { "id": "01a0c542-e50e-71e5-b7c4-a327db7ab387", "title": "[QP] Stop video recording your command line, I want to grep it!", "url": "https://diablohorn.com/2014/02/27/qp-stop-video-recording-your-command-line-i-want-to-grep-it/", "published_at": "2014-02-27T00:12:07+00:00" }, { "id": "01a0c542-e50e-71e5-b7c4-a327db914332", "title": "Solving RogueCoder’s SQLi challenge", "url": "https://diablohorn.com/2014/02/09/solving-roguecoders-sqli-challenge/", "published_at": "2014-02-09T22:17:10+00:00" }, { "id": "01a0c542-e50e-71e5-b7c4-a327dbd266be", "title": "Encrypted Screenshots", "url": "https://diablohorn.com/2014/01/18/encrypted-screenshots/", "published_at": "2014-01-18T01:04:08+00:00" }, { "id": "01a0c542-e50e-71e5-b7c4-a327dc3652c8", "title": "[QP] raw sockets & iptables", "url": "https://diablohorn.com/2013/11/28/qp-raw-sockets-iptables/", "published_at": "2013-11-28T00:44:01+00:00" }, { "id": "01a0c542-e50e-71e5-b7c4-a327dca3c370", "title": "Remote hash dumping: no processes or tool upload needed", "url": "https://diablohorn.com/2013/10/24/remote-hash-dumping-no-processes-or-tool-upload-needed/", "published_at": "2013-10-24T01:26:06+00:00" }, { "id": "01a0c542-e50e-71e5-b7c4-a327dd44b364", "title": "Alternative psexec: no wmi, services or mof needed", "url": "https://diablohorn.com/2013/10/19/alternative-psexec-no-wmi-services-or-mof-needed/", "published_at": "2013-10-19T19:10:46+00:00" }, { "id": "01a0c542-e50e-71e5-b7c4-a327dddcce16", "title": "sslsniff howto dump the temporary key", "url": "https://diablohorn.com/2013/07/14/sslsniff-howto-dump-the-temporary-key/", "published_at": "2013-07-14T21:06:08+00:00" }, { "id": "01a0c54b-c9c6-72fe-9f02-f6a0a1130c09", "title": "vbscript based interactive registry viewer", "url": "https://diablohorn.com/2013/05/14/vbscript-based-interactive-registry-viewer/", "published_at": "2013-05-14T22:25:41+00:00" }, { "id": "01a0c54b-c9c6-72fe-9f02-f6a0a151c8ee", "title": "Verifying Nmap scans", "url": "https://diablohorn.com/2013/05/07/verifying-nmap-scans/", "published_at": "2013-05-07T17:59:02+00:00" }, { "id": "01a0c54b-c9c6-72fe-9f02-f6a0a1ed0475", "title": "finding sub domains with search engines", "url": "https://diablohorn.com/2013/05/05/finding-sub-domains-with-search-engines/", "published_at": "2013-05-05T00:11:56+00:00" }, { "id": "01a0c54b-c9c6-72fe-9f02-f6a0a22fd978", "title": "Quick tiny python web proxy", "url": "https://diablohorn.com/2013/04/14/quick-tiny-python-web-proxy/", "published_at": "2013-04-14T22:16:02+00:00" }, { "id": "01a0c54b-c9c6-72fe-9f02-f6a0a2a09b56", "title": "Firewalking with nmap", "url": "https://diablohorn.com/2013/03/30/firewalking-with-nmap/", "published_at": "2013-03-30T19:03:31+00:00" }, { "id": "01a0c54b-c9c6-72fe-9f02-f6a0a329aa83", "title": "We bypassed antivirus, how about IDS/IPS?", "url": "https://diablohorn.com/2013/02/21/we-bypassed-antivirus-how-about-idsips/", "published_at": "2013-02-21T01:31:28+00:00" }, { "id": "01a0c54b-c9c6-72fe-9f02-f6a0a3e07ebe", "title": "console/terminal logs ftw", "url": "https://diablohorn.com/2013/02/06/console-terminal-logs-ftw/", "published_at": "2013-02-06T01:00:46+00:00" }, { "id": "01a0c54b-c9c6-72fe-9f02-f6a0a406b97b", "title": "Evade antivirus convert shellcode to c", "url": "https://diablohorn.com/2013/02/04/evade-antivirus-convert-shellcode-to-c/", "published_at": "2013-02-04T02:55:56+00:00" }, { "id": "01a0c54b-c9c6-72fe-9f02-f6a0a44f6943", "title": "Hash encapsulation to bypass AV", "url": "https://diablohorn.com/2013/01/20/hash-encapsulation-to-bypass-av/", "published_at": "2013-01-20T19:02:54+00:00" }, { "id": "01a0c54b-c9c6-72fe-9f02-f6a0a5036fb1", "title": "AV evasion: Recompiling & Optimizing FTW!", "url": "https://diablohorn.com/2013/01/19/av-evasion-recompiling-optimizing-ftw/", "published_at": "2013-01-19T03:20:02+00:00" }, { "id": "01a0c554-2353-72c4-997f-71e317d11d9c", "title": "native linux psexec", "url": "https://diablohorn.com/2013/01/13/native-linux-psexec/", "published_at": "2013-01-13T19:11:28+00:00" }, { "id": "01a0c554-2353-72c4-997f-71e317e519da", "title": "Making your own door opening shims", "url": "https://diablohorn.com/2013/01/07/making-your-own-door-opening-shims/", "published_at": "2013-01-07T22:49:55+00:00" }, { "id": "01a0c554-2353-72c4-997f-71e3186026cb", "title": "Vmware workstation and “dragging” vms to a new window", "url": "https://diablohorn.com/2012/12/10/vmware-workstation-and-dragging-vms-to-a-new-window/", "published_at": "2012-12-10T00:43:38+00:00" }, { "id": "01a0c554-2353-72c4-997f-71e3186d48f8", "title": "Portable (secure) (pen)test virtual lab", "url": "https://diablohorn.com/2012/12/08/portable-secure-pentest-virtual-lab/", "published_at": "2012-12-08T21:22:43+00:00" }, { "id": "01a0c554-2353-72c4-997f-71e319440076", "title": "Credential Scavenger", "url": "https://diablohorn.com/2012/11/22/credential-scavenger/", "published_at": "2012-11-22T02:26:50+00:00" }, { "id": "01a0c554-2353-72c4-997f-71e31a274827", "title": "Locating Domain Controllers", "url": "https://diablohorn.com/2012/02/18/locating-domain-controllers/", "published_at": "2012-02-18T21:43:47+00:00" }, { "id": "01a0c554-2353-72c4-997f-71e31aafbf80", "title": "connectionless backdoor idea, doesn’t use tcp/udp", "url": "https://diablohorn.com/2012/02/10/connectionless-backdoor-idea-doesnt-use-tcpudp/", "published_at": "2012-02-10T20:52:48+00:00" }, { "id": "01a0c554-2353-72c4-997f-71e31babb817", "title": "Encrypted JSP Shell with signed diffie-hellman key exchange", "url": "https://diablohorn.com/2012/01/19/encrypted-jsp-shell-with-signed-diffie-hellman-key-exchange/", "published_at": "2012-01-19T01:07:34+00:00" }, { "id": "01a0c554-2353-72c4-997f-71e31c9dcf5a", "title": "Virtualized Firewire attack", "url": "https://diablohorn.com/2012/01/04/virtualized-firewire-attack/", "published_at": "2012-01-04T22:31:15+00:00" }, { "id": "01a0c554-2353-72c4-997f-71e31d424026", "title": "Cleaning up links", "url": "https://diablohorn.com/2012/01/04/cleaning-up-links/", "published_at": "2012-01-04T02:53:07+00:00" }, { "id": "01a0c55c-8797-7367-b0bf-960665031d28", "title": "Simple JSP shell, Simple os detection & prolly flawed encrypted commands", "url": "https://diablohorn.com/2011/12/30/simple-jsp-shell-simple-os-detection-prolly-flawed-encrypted-commands/", "published_at": "2011-12-30T22:51:44+00:00" }, { "id": "01a0c55c-8797-7367-b0bf-9606653eeba6", "title": "Remote AV detection with EICAR", "url": "https://diablohorn.com/2011/12/10/remote-av-detection-with-eicar/", "published_at": "2011-12-10T02:39:12+00:00" }, { "id": "01a0c55c-8797-7367-b0bf-960665481268", "title": "8009, the forgotten Tomcat port", "url": "https://diablohorn.com/2011/10/19/8009-the-forgotten-tomcat-port/", "published_at": "2011-10-19T19:41:31+00:00" }, { "id": "01a0c55c-8797-7367-b0bf-960665cb1643", "title": "Quick & Dirty secure chat; ncat", "url": "https://diablohorn.com/2011/07/21/quick-dirty-secure-chat-ncat/", "published_at": "2011-07-21T21:17:55+00:00" }, { "id": "01a0c55c-8797-7367-b0bf-96066668e608", "title": "Efficient but slow blind sql injection data extraction", "url": "https://diablohorn.com/2011/07/08/efficient-but-slow-blind-sql-injection-data-extraction/", "published_at": "2011-07-08T20:41:08+00:00" }, { "id": "01a0c55c-8797-7367-b0bf-960666f012b7", "title": "mod_negotiation metasploit aux modules", "url": "https://diablohorn.com/2010/12/07/mod_negotiation-metasploit-aux-modules/", "published_at": "2010-12-07T22:25:11+00:00" }, { "id": "01a0c55c-8797-7367-b0bf-9606676c2fef", "title": "Moving source codes to github", "url": "https://diablohorn.com/2010/12/06/moving-source-codes-to-github/", "published_at": "2010-12-06T22:36:11+00:00" }, { "id": "01a0c55c-8797-7367-b0bf-9606676d74a7", "title": "DnsCat traffic post-dissector", "url": "https://diablohorn.com/2010/12/05/dnscat-traffic-post-dissector/", "published_at": "2010-12-05T16:37:07+00:00" }, { "id": "01a0c55c-8797-7367-b0bf-960668569ce8", "title": "What’s in a picture?", "url": "https://diablohorn.com/2010/12/04/whats-in-a-picture/", "published_at": "2010-12-04T17:26:34+00:00" }, { "id": "01a0c55c-8797-7367-b0bf-96066898b2cb", "title": "Lua based DnsCat traffic parser", "url": "https://diablohorn.com/2010/12/01/lua-based-dnscat-traffic-parser/", "published_at": "2010-12-01T20:23:55+00:00" } ] posts Claim your blog

Back to diablohorn.com

Blog · corpus.blog/blogs/diablohorn.com/posts

diablohorn.com

diablohorn.com

2026

Vibe coding: supply chain insights original ↗

23 Aug 2026

Old skool tales on initial access original ↗

23 Apr 2026

Playing with the LANL ARCS Data Sets original ↗

19 Apr 2026

Observations on AI generated Remote DuckDB via HTTP with mTLS original ↗

22 Mar 2026

[QuickPost] DuckDB NDJSON force all columns original ↗

19 Mar 2026

Invisible security requires friction first original ↗

27 Feb 2026

2025

Recon your patents with GenAI?original ↗

7 Dec 2025

YOLO detect security cameras original ↗

26 Oct 2025

2024

Emotions as human detection & defence original ↗

22 May 2024

Random thoughts on physical security measures original ↗

21 May 2024

PowerShell cmdline parsing/tokenization original ↗

31 Mar 2024

Analyzing Pipedream / Incontroller with MITRE/STIX original ↗

17 Mar 2024

2023

Lateral movement: A conceptual overview original ↗

22 Aug 2023

Opinion: Time is crucial when building secure components or infrastructures original ↗

9 Apr 2023

2022

OBS: Presentation & slides side by side original ↗

25 Nov 2022

Parsing atop files with python dissect.cstruct original ↗

16 Nov 2022

Baby steps into MITRE Stix/Taxii, Pandas, Graphs & Jupyter notebooks original ↗

30 Oct 2022

Lockbit’s bounty: consequences matter original ↗

17 Sept 2022

Generating network connection information for experimentation purposes original ↗

11 Sept 2022

Three ways to hack an ATM original ↗

14 May 2022

Writing a zero findings pentest report original ↗

23 Apr 2022

Firewall analysis: A portable graph based approach original ↗

9 Apr 2022

2021

More doing, less cyber original ↗

7 Nov 2021

CSAW 2021, binary ninja & a haystack original ↗

20 Sept 2021

Pentesting: What I should have done original ↗

23 Apr 2021

Into the void: ramblings and thoughts original ↗

14 Apr 2021

2020

[Part 2] Interactive and transferrable code risk visualization original ↗

10 May 2020

[Part 1] Experimenting with visualizations and code risk overview original ↗

6 May 2020

The fallacy of ‘manual work’ being faster original ↗

27 Apr 2020

vysolator: vyos virtual network isolation original ↗

28 Mar 2020

Lessons learned on written social engineering attacks original ↗

4 Mar 2020

2019

Old Skool Red Team original ↗

28 Dec 2019

Secure slack bot; An exercise in threat modeling original ↗

17 Nov 2019

Notes on ZFS / Solaris forensics original ↗

1 Sept 2019

Introduction to physical penetration tests original ↗

21 Jul 2019

Introduction to analysing full disk encryption solutions original ↗

21 May 2019

2018

Remote NTLM relaying through meterpreter on Windows port 445 original ↗

25 Aug 2018

Creating a ram disk through meterpreter original ↗

6 Aug 2018

Presentation: Understanding & avoiding AV detection original ↗

27 Feb 2018

Identify a whitelisted IP address original ↗

4 Feb 2018

2017

YARA for pentesters original ↗

25 Dec 2017

attacking encrypted systems with qemu and volatility original ↗

12 Dec 2017

Port scanning without an IP address original ↗

26 Oct 2017

Understanding & practicing java deserialization exploits original ↗

9 Sept 2017

Brute forcing encrypted web login forms original ↗

15 Aug 2017

Quantum Insert: bypassing IP restrictions original ↗

21 May 2017

Repurposing the HP audio key logger original ↗

12 May 2017

Python raw sockets sniffing & pcap saving original ↗

9 Mar 2017

2016

Win10 secure boot inside vmware fusion original ↗

5 Nov 2016

Meterpreter, registry & unicode quirk work around original ↗

27 Sept 2016

[python] Poor man’s forensics original ↗

14 Aug 2016

Idea: Abusing Google DLP for NSA-style content searching original ↗

1 Mar 2016

PowerShell overview and introduction original ↗

6 Feb 2016

2015

pageant key extraction automated original ↗

3 Oct 2015

Discovering the secrets of a pageant minidump original ↗

4 Sept 2015

Continuously rotating hashes original ↗

28 Mar 2015

2014

Parsing the hiberfil.sys, searching for slack space original ↗

10 Dec 2014

Writing your own blind SQLi script original ↗

26 Jul 2014

Physical home security options original ↗

13 Jul 2014

Quick POC to mitm RDP ssl original ↗

21 Apr 2014

[QP] Dumping the TrueCrypt second stage original ↗

23 Mar 2014

[old] VMware vSphere client XML External Entity attack original ↗

16 Mar 2014

Memory Zeroization: frustrating memory forensics original ↗

16 Mar 2014

[QP] Stop video recording your command line, I want to grep it!original ↗

27 Feb 2014

Solving RogueCoder’s SQLi challenge original ↗

9 Feb 2014

Encrypted Screenshots original ↗

18 Jan 2014

2013

[QP] raw sockets & iptables original ↗

28 Nov 2013

Remote hash dumping: no processes or tool upload needed original ↗

24 Oct 2013

Alternative psexec: no wmi, services or mof needed original ↗

19 Oct 2013

sslsniff howto dump the temporary key original ↗

14 Jul 2013

vbscript based interactive registry viewer original ↗

14 May 2013

Verifying Nmap scans original ↗

7 May 2013

finding sub domains with search engines original ↗

5 May 2013

Quick tiny python web proxy original ↗

14 Apr 2013

Firewalking with nmap original ↗

30 Mar 2013

We bypassed antivirus, how about IDS/IPS?original ↗

21 Feb 2013

console/terminal logs ftw original ↗

6 Feb 2013

Evade antivirus convert shellcode to c original ↗

4 Feb 2013

Hash encapsulation to bypass AV original ↗

20 Jan 2013

AV evasion: Recompiling & Optimizing FTW!original ↗

19 Jan 2013

native linux psexec original ↗

13 Jan 2013

Making your own door opening shims original ↗

7 Jan 2013

2012

Vmware workstation and “dragging” vms to a new window original ↗

10 Dec 2012

Portable (secure) (pen)test virtual lab original ↗

8 Dec 2012

Credential Scavenger original ↗

22 Nov 2012

Locating Domain Controllers original ↗

18 Feb 2012

connectionless backdoor idea, doesn’t use tcp/udp original ↗

10 Feb 2012

Encrypted JSP Shell with signed diffie-hellman key exchange original ↗

19 Jan 2012

Virtualized Firewire attack original ↗

4 Jan 2012

Cleaning up links original ↗

4 Jan 2012

2011

Simple JSP shell, Simple os detection & prolly flawed encrypted commands original ↗

30 Dec 2011

Remote AV detection with EICAR original ↗

10 Dec 2011

8009, the forgotten Tomcat port original ↗

19 Oct 2011

Quick & Dirty secure chat; ncat original ↗

21 Jul 2011

Efficient but slow blind sql injection data extraction original ↗

8 Jul 2011

2010

mod_negotiation metasploit aux modules original ↗

7 Dec 2010

Moving source codes to github original ↗

6 Dec 2010

DnsCat traffic post-dissector original ↗

5 Dec 2010

What’s in a picture?original ↗

4 Dec 2010

Lua based DnsCat traffic parser original ↗

1 Dec 2010