corpus.blog
41554 blogs · [ { "id": "01a08778-ce56-72b7-aff7-2635aaa4a319", "title": "Citrix copy/paste circumvention on MacOS", "url": "https://www.floyd.ch/?p=1401", "published_at": "2024-09-23T15:41:12+00:00" }, { "id": "01a08778-ce56-72b7-aff7-2635ab8b2b3b", "title": "Certificate is not standards compliant on MacOS/iOS, error -9802, strict TLS Trust evaluation failed", "url": "https://www.floyd.ch/?p=1382", "published_at": "2024-01-31T11:46:15+00:00" }, { "id": "01a08778-ce56-72b7-aff7-2635ac5035a5", "title": "MacOS built-in VPN IKEv2 force remove VPN DNS resolver", "url": "https://www.floyd.ch/?p=1342", "published_at": "2023-05-30T15:31:05+00:00" }, { "id": "01a08778-ce56-72b7-aff7-2635ac609090", "title": "Cross-origin resource sharing: unencrypted origin trusted PoC", "url": "https://www.floyd.ch/?p=1310", "published_at": "2022-04-26T09:30:31+00:00" }, { "id": "01a08778-ce56-72b7-aff7-2635ace590ab", "title": "New year, new host, same hacks", "url": "https://www.floyd.ch/?p=1168", "published_at": "2022-02-07T11:12:31+00:00" }, { "id": "01a08778-ce56-72b7-aff7-2635ada700ac", "title": "Python Sender", "url": "https://www.floyd.ch/?p=1105", "published_at": "2018-11-27T16:10:19+00:00" }, { "id": "01a08778-ce56-72b7-aff7-2635ae237906", "title": "Java Bugs with and without Fuzzing – AFL-based Java fuzzers and the Java Security Manager", "url": "https://www.floyd.ch/?p=1090", "published_at": "2018-09-25T08:48:05+00:00" }, { "id": "01a08778-ce56-72b7-aff7-2635af0f76ab", "title": "Activity wrap-up including polyglots, RIPS, UploadScanner and Java fuzzing", "url": "https://www.floyd.ch/?p=1074", "published_at": "2018-05-25T18:40:06+00:00" }, { "id": "01a08778-ce56-72b7-aff7-2635afece4ce", "title": "Schubser and his cookie dealing friend", "url": "https://www.floyd.ch/?p=1059", "published_at": "2018-04-23T09:39:47+00:00" }, { "id": "01a08778-ce56-72b7-aff7-2635b0d43a6f", "title": "BSides Zurich – Nail in the JKS coffin", "url": "https://www.floyd.ch/?p=1015", "published_at": "2017-09-25T09:19:23+00:00" }, { "id": "01a0c50d-3f17-726d-a18b-155e091d671f", "title": "Android Nougat’s certificate pinning security mechanism", "url": "https://www.floyd.ch/?p=1013", "published_at": "2017-09-23T14:55:03+00:00" }, { "id": "01a0c50d-3f17-726d-a18b-155e09ff914e", "title": "Java Key Store (JKS) format is weak and insecure (CVE-2017-10356)", "url": "https://www.floyd.ch/?p=1006", "published_at": "2017-09-19T08:40:29+00:00" }, { "id": "01a0c50d-3f17-726d-a18b-155e0a61c460", "title": "Cracking Java’s weak encryption – Nail in the JKS coffin", "url": "https://www.floyd.ch/?p=985", "published_at": "2017-07-07T09:27:25+00:00" }, { "id": "01a0c50d-3f17-726d-a18b-155e0b538f9a", "title": "Crash bash", "url": "https://www.floyd.ch/?p=961", "published_at": "2017-03-14T14:27:40+00:00" }, { "id": "01a0c50d-3f17-726d-a18b-155e0c23fefa", "title": "iOS TLS session resumption race condition (CVE-2016-10511)", "url": "https://www.floyd.ch/?p=958", "published_at": "2016-12-23T15:43:37+00:00" }, { "id": "01a0c50d-3f17-726d-a18b-155e0c9bb782", "title": "Activity wrap-up including AFL, CRASS and Burp", "url": "https://www.floyd.ch/?p=946", "published_at": "2016-11-25T14:18:05+00:00" }, { "id": "01a0c50d-3f17-726d-a18b-155e0cf5919d", "title": "Rating conference submissions", "url": "https://www.floyd.ch/?p=920", "published_at": "2015-12-31T14:23:56+00:00" }, { "id": "01a0c50d-3f17-726d-a18b-155e0d8fcde2", "title": "What I’ve been up to: a lot", "url": "https://www.floyd.ch/?p=912", "published_at": "2015-10-06T06:38:49+00:00" }, { "id": "01a0c50d-3f17-726d-a18b-155e0e4383f9", "title": "Python difflib SequenceMatcher quick_ratio performance contribution", "url": "https://www.floyd.ch/?p=901", "published_at": "2015-06-09T06:27:04+00:00" }, { "id": "01a0c50d-3f17-726d-a18b-155e0ed19efe", "title": "Introduction to American Fuzzy Lop (AFL) Powerpoint", "url": "https://www.floyd.ch/?p=889", "published_at": "2015-03-12T10:41:27+00:00" }, { "id": "01a0c51c-3f02-729e-bb0f-1cf34211986d", "title": "About the CVEs in libtiff 4.0.3", "url": "https://www.floyd.ch/?p=874", "published_at": "2015-01-28T16:24:03+00:00" }, { "id": "01a0c51c-3f02-729e-bb0f-1cf343037ce0", "title": "New year – Vallader app, fuzzing and advisories", "url": "https://www.floyd.ch/?p=865", "published_at": "2015-01-04T20:54:10+00:00" }, { "id": "01a0c51c-3f02-729e-bb0f-1cf343a8c379", "title": "Metasploit tincd module officially released", "url": "https://www.floyd.ch/?p=858", "published_at": "2014-12-02T10:21:13+00:00" }, { "id": "01a0c51c-3f02-729e-bb0f-1cf343c40bc0", "title": "Android app configuration manipulation", "url": "https://www.floyd.ch/?p=836", "published_at": "2014-10-25T08:00:21+00:00" }, { "id": "01a0c51c-3f02-729e-bb0f-1cf3441dd41e", "title": "Shellshock fix – bash compiling for OSX", "url": "https://www.floyd.ch/?p=847", "published_at": "2014-10-08T08:52:55+00:00" }, { "id": "01a0c51c-3f02-729e-bb0f-1cf344f7db2b", "title": "Android app disassembling, modification and reassembling", "url": "https://www.floyd.ch/?p=823", "published_at": "2014-09-07T12:59:41+00:00" }, { "id": "01a0c51c-3f02-729e-bb0f-1cf345ec545d", "title": "mona codealign", "url": "https://www.floyd.ch/?p=795", "published_at": "2014-02-05T11:45:03+00:00" }, { "id": "01a0c51c-3f02-729e-bb0f-1cf3461f7a85", "title": "Tincd Metasploit module and exploit development", "url": "https://www.floyd.ch/?p=741", "published_at": "2013-12-11T23:24:50+00:00" }, { "id": "01a0c51c-3f02-729e-bb0f-1cf346350b61", "title": "OWASP AntiSamy Project XSS", "url": "https://www.floyd.ch/?p=761", "published_at": "2013-08-30T13:48:15+00:00" }, { "id": "01a0c51c-3f02-729e-bb0f-1cf346b080f8", "title": "Samsung Galaxy S3 / Android device encryption is broken and the factory reset feature joined the party", "url": "https://www.floyd.ch/?p=705", "published_at": "2013-02-25T16:48:02+00:00" }, { "id": "01a0c527-6a22-71bd-bc27-47cd35f2bbe6", "title": "Automated generation of code alignment code for Unicode buffer overflow exploitation", "url": "https://www.floyd.ch/?p=629", "published_at": "2013-01-16T23:47:59+00:00" }, { "id": "01a0c527-6a22-71bd-bc27-47cd360b8f34", "title": "Hiding files in GIF comments", "url": "https://www.floyd.ch/?p=616", "published_at": "2012-12-16T11:59:02+00:00" }, { "id": "01a0c527-6a22-71bd-bc27-47cd3616e012", "title": "Exploiting Python’s Eval", "url": "https://www.floyd.ch/?p=584", "published_at": "2012-10-25T13:50:43+00:00" }, { "id": "01a0c527-6a22-71bd-bc27-47cd36932f28", "title": "Source Code Review Grep Script", "url": "https://www.floyd.ch/?p=565", "published_at": "2012-09-22T12:16:22+00:00" }, { "id": "01a0c527-6a22-71bd-bc27-47cd36a00075", "title": "A Weird Idea – Java, Strings and Memory", "url": "https://www.floyd.ch/?p=552", "published_at": "2012-08-25T10:27:43+00:00" }, { "id": "01a0c527-6a22-71bd-bc27-47cd37538225", "title": "Google Ads Encryption Key", "url": "https://www.floyd.ch/?p=516", "published_at": "2012-08-02T09:26:59+00:00" }, { "id": "01a0c527-6a22-71bd-bc27-47cd38371164", "title": "BeEF webcam and Gmail plugin", "url": "https://www.floyd.ch/?p=520", "published_at": "2012-06-19T08:35:16+00:00" }, { "id": "01a0c527-6a22-71bd-bc27-47cd38527eeb", "title": "Free OWASP membership", "url": "https://www.floyd.ch/?p=491", "published_at": "2012-04-12T15:15:24+00:00" }, { "id": "01a0c527-6a22-71bd-bc27-47cd39152fa9", "title": "PostFinance Digipass 810", "url": "https://www.floyd.ch/?p=435", "published_at": "2012-03-30T17:22:09+00:00" }, { "id": "01a0c527-6a22-71bd-bc27-47cd397246bb", "title": "Microsoft .NET: Circumventing XSS request validation", "url": "https://www.floyd.ch/?p=462", "published_at": "2012-02-22T18:48:20+00:00" }, { "id": "01a0c532-a56d-7028-8429-9b3b60213a07", "title": "Officially untrusted", "url": "https://www.floyd.ch/?p=425", "published_at": "2011-12-10T12:24:17+00:00" }, { "id": "01a0c532-a56d-7028-8429-9b3b60f6ed02", "title": "How to store credentials on Android", "url": "https://www.floyd.ch/?p=384", "published_at": "2011-11-17T16:39:11+00:00" }, { "id": "01a0c532-a56d-7028-8429-9b3b611e8d44", "title": "Hashdays", "url": "https://www.floyd.ch/?p=446", "published_at": "2011-11-03T14:15:50+00:00" }, { "id": "01a0c532-a56d-7028-8429-9b3b61780972", "title": "0sec talk", "url": "https://www.floyd.ch/?p=392", "published_at": "2011-10-29T12:00:38+00:00" }, { "id": "01a0c532-a56d-7028-8429-9b3b62197763", "title": "Android Pentest Tools", "url": "https://www.floyd.ch/?p=365", "published_at": "2011-10-13T22:36:32+00:00" }, { "id": "01a0c532-a56d-7028-8429-9b3b627e99c7", "title": "Cross-compiling bash for Android ARM", "url": "https://www.floyd.ch/?p=330", "published_at": "2011-10-02T15:05:28+00:00" }, { "id": "01a0c532-a56d-7028-8429-9b3b62f9784c", "title": "Sending generic HTTP(S) requests in python", "url": "https://www.floyd.ch/?p=304", "published_at": "2011-09-27T09:38:35+00:00" }, { "id": "01a0c532-a56d-7028-8429-9b3b631e41cd", "title": "Ack-All-Happy-Scapy – Finding a hole in a corporate firewall", "url": "https://www.floyd.ch/?p=352", "published_at": "2011-09-20T00:43:40+00:00" }, { "id": "01a0c532-a56d-7028-8429-9b3b6368bd70", "title": "DNS zone transfer", "url": "https://www.floyd.ch/?p=344", "published_at": "2011-09-13T17:08:57+00:00" }, { "id": "01a0c532-a56d-7028-8429-9b3b6380a21e", "title": "Detect shared hosting with Bing", "url": "https://www.floyd.ch/?p=297", "published_at": "2011-09-10T09:15:28+00:00" }, { "id": "01a0c53d-28b4-717b-a8ce-6b4e641c9c62", "title": "AES encryption/decryption in python", "url": "https://www.floyd.ch/?p=293", "published_at": "2011-08-28T10:53:28+00:00" }, { "id": "01a0c53d-28b4-717b-a8ce-6b4e64b8d2f8", "title": "XSS – developing an exploit from HTML form to jQuery", "url": "https://www.floyd.ch/?p=335", "published_at": "2011-08-26T13:19:18+00:00" }, { "id": "01a0c53d-28b4-717b-a8ce-6b4e657088b8", "title": "Extracting Windows Hashes", "url": "https://www.floyd.ch/?p=326", "published_at": "2011-08-19T15:03:54+00:00" }, { "id": "01a0c53d-28b4-717b-a8ce-6b4e65d98ab9", "title": "How webservers react on specific characters", "url": "https://www.floyd.ch/?p=276", "published_at": "2011-08-15T12:27:17+00:00" }, { "id": "01a0c53d-28b4-717b-a8ce-6b4e6641438c", "title": "Automating JD-GUI decompilation on a Mac with AppleScript", "url": "https://www.floyd.ch/?p=315", "published_at": "2011-08-11T10:30:01+00:00" }, { "id": "01a0c53d-28b4-717b-a8ce-6b4e66e4e30f", "title": "Importing Burp CA into rooted Android device", "url": "https://www.floyd.ch/?p=244", "published_at": "2011-07-28T10:52:35+00:00" }, { "id": "01a0c53d-28b4-717b-a8ce-6b4e66fbc0d4", "title": "HTML5 security – making web users more safe?", "url": "https://www.floyd.ch/?p=190", "published_at": "2010-10-02T11:29:11+00:00" }, { "id": "01a0c53d-28b4-717b-a8ce-6b4e67a648c7", "title": "What about JavaScript support?", "url": "https://www.floyd.ch/?p=160", "published_at": "2010-09-28T08:21:49+00:00" }, { "id": "01a0c53d-28b4-717b-a8ce-6b4e68264ce2", "title": "Ticket machine fail", "url": "https://www.floyd.ch/?p=112", "published_at": "2010-08-03T10:04:39+00:00" }, { "id": "01a0c53d-28b4-717b-a8ce-6b4e68d93785", "title": "Location based XSS attacks", "url": "https://www.floyd.ch/?p=103", "published_at": "2010-07-19T09:07:52+00:00" }, { "id": "01a0c545-9bbe-71e2-858a-1fdc7dd8b888", "title": "Rick Roll’d (Google auto redirect)", "url": "https://www.floyd.ch/?p=94", "published_at": "2010-07-14T09:36:32+00:00" }, { "id": "01a0c545-9bbe-71e2-858a-1fdc7e32757d", "title": "Apache HTTP 0.9 compatible", "url": "https://www.floyd.ch/?p=78", "published_at": "2010-06-10T07:13:53+00:00" }, { "id": "01a0c545-9bbe-71e2-858a-1fdc7ef2a023", "title": "New Injection Vector for PHP", "url": "https://www.floyd.ch/?p=48", "published_at": "2010-05-31T11:31:05+00:00" }, { "id": "01a0c545-9bbe-71e2-858a-1fdc7f3d0b0d", "title": "Typo3 encryptionKey", "url": "https://www.floyd.ch/?p=31", "published_at": "2010-05-15T13:20:20+00:00" }, { "id": "01a0c545-9bbe-71e2-858a-1fdc803b350f", "title": "Is character set ISO-8859-1 = Windows-1252 ?", "url": "https://www.floyd.ch/?p=12", "published_at": "2010-05-11T17:04:53+00:00" }, { "id": "01a0c545-9bbe-71e2-858a-1fdc80e08ab2", "title": "ehlo floyd.ch", "url": "https://www.floyd.ch/?p=1", "published_at": "2010-05-09T20:23:25+00:00" } ] posts Claim your blog
Back to floyd.ch
Blog · corpus.blog/blogs/floyd.ch/posts

floyd.ch

floyd.ch

2024

Citrix copy/paste circumvention on MacOSoriginal ↗
23 Sept 2024
Certificate is not standards compliant on MacOS/iOS, error -9802, strict TLS Trust evaluation failedoriginal ↗
31 Jan 2024

2023

MacOS built-in VPN IKEv2 force remove VPN DNS resolveroriginal ↗
30 May 2023

2022

Cross-origin resource sharing: unencrypted origin trusted PoCoriginal ↗
26 Apr 2022
New year, new host, same hacksoriginal ↗
7 Feb 2022

2018

Python Senderoriginal ↗
27 Nov 2018
Java Bugs with and without Fuzzing – AFL-based Java fuzzers and the Java Security Manageroriginal ↗
25 Sept 2018
Activity wrap-up including polyglots, RIPS, UploadScanner and Java fuzzingoriginal ↗
25 May 2018
Schubser and his cookie dealing friendoriginal ↗
23 Apr 2018

2017

BSides Zurich – Nail in the JKS coffinoriginal ↗
25 Sept 2017
Android Nougat’s certificate pinning security mechanismoriginal ↗
23 Sept 2017
Java Key Store (JKS) format is weak and insecure (CVE-2017-10356)original ↗
19 Sept 2017
Cracking Java’s weak encryption – Nail in the JKS coffinoriginal ↗
7 Jul 2017
Crash bashoriginal ↗
14 Mar 2017

2016

iOS TLS session resumption race condition (CVE-2016-10511)original ↗
23 Dec 2016
Activity wrap-up including AFL, CRASS and Burporiginal ↗
25 Nov 2016

2015

Rating conference submissionsoriginal ↗
31 Dec 2015
What I’ve been up to: a lotoriginal ↗
6 Oct 2015
Python difflib SequenceMatcher quick_ratio performance contributionoriginal ↗
9 Jun 2015
Introduction to American Fuzzy Lop (AFL) Powerpointoriginal ↗
12 Mar 2015
About the CVEs in libtiff 4.0.3original ↗
28 Jan 2015
New year – Vallader app, fuzzing and advisoriesoriginal ↗
4 Jan 2015

2014

Metasploit tincd module officially releasedoriginal ↗
2 Dec 2014
Android app configuration manipulationoriginal ↗
25 Oct 2014
Shellshock fix – bash compiling for OSXoriginal ↗
8 Oct 2014
Android app disassembling, modification and reassemblingoriginal ↗
7 Sept 2014
mona codealignoriginal ↗
5 Feb 2014

2013

Tincd Metasploit module and exploit developmentoriginal ↗
11 Dec 2013
OWASP AntiSamy Project XSSoriginal ↗
30 Aug 2013
Samsung Galaxy S3 / Android device encryption is broken and the factory reset feature joined the partyoriginal ↗
25 Feb 2013
Automated generation of code alignment code for Unicode buffer overflow exploitationoriginal ↗
16 Jan 2013

2012

Hiding files in GIF commentsoriginal ↗
16 Dec 2012
Exploiting Python’s Evaloriginal ↗
25 Oct 2012
Source Code Review Grep Scriptoriginal ↗
22 Sept 2012
A Weird Idea – Java, Strings and Memoryoriginal ↗
25 Aug 2012
Google Ads Encryption Keyoriginal ↗
2 Aug 2012
BeEF webcam and Gmail pluginoriginal ↗
19 Jun 2012
Free OWASP membershiporiginal ↗
12 Apr 2012
PostFinance Digipass 810original ↗
30 Mar 2012
Microsoft .NET: Circumventing XSS request validationoriginal ↗
22 Feb 2012

2011

Officially untrustedoriginal ↗
10 Dec 2011
How to store credentials on Androidoriginal ↗
17 Nov 2011
Hashdaysoriginal ↗
3 Nov 2011
0sec talkoriginal ↗
29 Oct 2011
Android Pentest Toolsoriginal ↗
13 Oct 2011
Cross-compiling bash for Android ARMoriginal ↗
2 Oct 2011
Sending generic HTTP(S) requests in pythonoriginal ↗
27 Sept 2011
Ack-All-Happy-Scapy – Finding a hole in a corporate firewalloriginal ↗
20 Sept 2011
DNS zone transferoriginal ↗
13 Sept 2011
Detect shared hosting with Bingoriginal ↗
10 Sept 2011
AES encryption/decryption in pythonoriginal ↗
28 Aug 2011
XSS – developing an exploit from HTML form to jQueryoriginal ↗
26 Aug 2011
Extracting Windows Hashesoriginal ↗
19 Aug 2011
How webservers react on specific charactersoriginal ↗
15 Aug 2011
Automating JD-GUI decompilation on a Mac with AppleScriptoriginal ↗
11 Aug 2011
Importing Burp CA into rooted Android deviceoriginal ↗
28 Jul 2011

2010

HTML5 security – making web users more safe?original ↗
2 Oct 2010
What about JavaScript support?original ↗
28 Sept 2010
Ticket machine failoriginal ↗
3 Aug 2010
Location based XSS attacksoriginal ↗
19 Jul 2010
Rick Roll’d (Google auto redirect)original ↗
14 Jul 2010
Apache HTTP 0.9 compatibleoriginal ↗
10 Jun 2010
New Injection Vector for PHPoriginal ↗
31 May 2010
Typo3 encryptionKeyoriginal ↗
15 May 2010
Is character set ISO-8859-1 = Windows-1252 ?original ↗
11 May 2010
ehlo floyd.choriginal ↗
9 May 2010