41,554 blogs · 4,830,141 posts Claim your blog

Back to diablohorn.com

Blog · corpus.blog/blogs/diablohorn.com/posts

diablohorn.com

diablohorn.com

2026

Vibe coding: supply chain insights original ↗

23 Aug 2026

Old skool tales on initial access original ↗

23 Apr 2026

Playing with the LANL ARCS Data Sets original ↗

19 Apr 2026

Observations on AI generated Remote DuckDB via HTTP with mTLS original ↗

22 Mar 2026

[QuickPost] DuckDB NDJSON force all columns original ↗

19 Mar 2026

Invisible security requires friction first original ↗

27 Feb 2026

2025

Recon your patents with GenAI?original ↗

7 Dec 2025

YOLO detect security cameras original ↗

26 Oct 2025

2024

Emotions as human detection & defence original ↗

22 May 2024

Random thoughts on physical security measures original ↗

21 May 2024

PowerShell cmdline parsing/tokenization original ↗

31 Mar 2024

Analyzing Pipedream / Incontroller with MITRE/STIX original ↗

17 Mar 2024

2023

Lateral movement: A conceptual overview original ↗

22 Aug 2023

Opinion: Time is crucial when building secure components or infrastructures original ↗

9 Apr 2023

2022

OBS: Presentation & slides side by side original ↗

25 Nov 2022

Parsing atop files with python dissect.cstruct original ↗

16 Nov 2022

Baby steps into MITRE Stix/Taxii, Pandas, Graphs & Jupyter notebooks original ↗

30 Oct 2022

Lockbit’s bounty: consequences matter original ↗

17 Sept 2022

Generating network connection information for experimentation purposes original ↗

11 Sept 2022

Three ways to hack an ATM original ↗

14 May 2022

Writing a zero findings pentest report original ↗

23 Apr 2022

Firewall analysis: A portable graph based approach original ↗

9 Apr 2022

2021

More doing, less cyber original ↗

7 Nov 2021

CSAW 2021, binary ninja & a haystack original ↗

20 Sept 2021

Pentesting: What I should have done original ↗

23 Apr 2021

Into the void: ramblings and thoughts original ↗

14 Apr 2021

2020

[Part 2] Interactive and transferrable code risk visualization original ↗

10 May 2020

[Part 1] Experimenting with visualizations and code risk overview original ↗

6 May 2020

The fallacy of ‘manual work’ being faster original ↗

27 Apr 2020

vysolator: vyos virtual network isolation original ↗

28 Mar 2020

Lessons learned on written social engineering attacks original ↗

4 Mar 2020

2019

Old Skool Red Team original ↗

28 Dec 2019

Secure slack bot; An exercise in threat modeling original ↗

17 Nov 2019

Notes on ZFS / Solaris forensics original ↗

1 Sept 2019

Introduction to physical penetration tests original ↗

21 Jul 2019

Introduction to analysing full disk encryption solutions original ↗

21 May 2019

2018

Remote NTLM relaying through meterpreter on Windows port 445 original ↗

25 Aug 2018

Creating a ram disk through meterpreter original ↗

6 Aug 2018

Presentation: Understanding & avoiding AV detection original ↗

27 Feb 2018

Identify a whitelisted IP address original ↗

4 Feb 2018

2017

YARA for pentesters original ↗

25 Dec 2017

attacking encrypted systems with qemu and volatility original ↗

12 Dec 2017

Port scanning without an IP address original ↗

26 Oct 2017

Understanding & practicing java deserialization exploits original ↗

9 Sept 2017

Brute forcing encrypted web login forms original ↗

15 Aug 2017

Quantum Insert: bypassing IP restrictions original ↗

21 May 2017

Repurposing the HP audio key logger original ↗

12 May 2017

Python raw sockets sniffing & pcap saving original ↗

9 Mar 2017

2016

Win10 secure boot inside vmware fusion original ↗

5 Nov 2016

Meterpreter, registry & unicode quirk work around original ↗

27 Sept 2016

[python] Poor man’s forensics original ↗

14 Aug 2016

Idea: Abusing Google DLP for NSA-style content searching original ↗

1 Mar 2016

PowerShell overview and introduction original ↗

6 Feb 2016

2015

pageant key extraction automated original ↗

3 Oct 2015

Discovering the secrets of a pageant minidump original ↗

4 Sept 2015

Continuously rotating hashes original ↗

28 Mar 2015

2014

Parsing the hiberfil.sys, searching for slack space original ↗

10 Dec 2014

Writing your own blind SQLi script original ↗

26 Jul 2014

Physical home security options original ↗

13 Jul 2014

Quick POC to mitm RDP ssl original ↗

21 Apr 2014

[QP] Dumping the TrueCrypt second stage original ↗

23 Mar 2014

[old] VMware vSphere client XML External Entity attack original ↗

16 Mar 2014

Memory Zeroization: frustrating memory forensics original ↗

16 Mar 2014

[QP] Stop video recording your command line, I want to grep it!original ↗

27 Feb 2014

Solving RogueCoder’s SQLi challenge original ↗

9 Feb 2014

Encrypted Screenshots original ↗

18 Jan 2014

2013

[QP] raw sockets & iptables original ↗

28 Nov 2013

Remote hash dumping: no processes or tool upload needed original ↗

24 Oct 2013

Alternative psexec: no wmi, services or mof needed original ↗

19 Oct 2013

sslsniff howto dump the temporary key original ↗

14 Jul 2013

vbscript based interactive registry viewer original ↗

14 May 2013

Verifying Nmap scans original ↗

7 May 2013

finding sub domains with search engines original ↗

5 May 2013

Quick tiny python web proxy original ↗

14 Apr 2013

Firewalking with nmap original ↗

30 Mar 2013

We bypassed antivirus, how about IDS/IPS?original ↗

21 Feb 2013

console/terminal logs ftw original ↗

6 Feb 2013

Evade antivirus convert shellcode to c original ↗

4 Feb 2013

Hash encapsulation to bypass AV original ↗

20 Jan 2013

AV evasion: Recompiling & Optimizing FTW!original ↗

19 Jan 2013

native linux psexec original ↗

13 Jan 2013

Making your own door opening shims original ↗

7 Jan 2013

2012

Vmware workstation and “dragging” vms to a new window original ↗

10 Dec 2012

Portable (secure) (pen)test virtual lab original ↗

8 Dec 2012

Credential Scavenger original ↗

22 Nov 2012

Locating Domain Controllers original ↗

18 Feb 2012

connectionless backdoor idea, doesn’t use tcp/udp original ↗

10 Feb 2012

Encrypted JSP Shell with signed diffie-hellman key exchange original ↗

19 Jan 2012

Virtualized Firewire attack original ↗

4 Jan 2012

Cleaning up links original ↗

4 Jan 2012

2011

Simple JSP shell, Simple os detection & prolly flawed encrypted commands original ↗

30 Dec 2011

Remote AV detection with EICAR original ↗

10 Dec 2011

8009, the forgotten Tomcat port original ↗

19 Oct 2011

Quick & Dirty secure chat; ncat original ↗

21 Jul 2011

Efficient but slow blind sql injection data extraction original ↗

8 Jul 2011

2010

mod_negotiation metasploit aux modules original ↗

7 Dec 2010

Moving source codes to github original ↗

6 Dec 2010

DnsCat traffic post-dissector original ↗

5 Dec 2010

What’s in a picture?original ↗

4 Dec 2010

Lua based DnsCat traffic parser original ↗

1 Dec 2010