56,966 blogs · [ { "id": "01a0bdcb-ada5-704d-a4d3-74893ea46674", "title": "Preparing My Taxes with AI", "url": "https://parsiya.net/blog/tax-ai/", "published_at": "2026-09-17T07:11:03+00:00" }, { "id": "01a087bc-f647-7161-93af-1e8196cb8431", "title": "Reverse Engineering Burp Project Format", "url": "https://parsiya.net/blog/burp-project-reverse/", "published_at": "2026-09-07T07:11:03+00:00" }, { "id": "01a087bc-f647-7161-93af-1e819780f0fd", "title": "Brain the Size of a Planet: Are LLMs Thonking too Hard?", "url": "https://parsiya.net/blog/llm-thonking/", "published_at": "2026-06-17T07:03:45+00:00" }, { "id": "01a087bc-f647-7161-93af-1e8198071cfa", "title": "Harnessing the Wayward Machine-God, 1: Manual Markdown Cleanup Is a Bug", "url": "https://parsiya.net/blog/machine-god-1/", "published_at": "2026-04-21T15:55:57+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81983dd055", "title": "AI Borked my Keyboard - Reversing the Aula F108 Pro Software", "url": "https://parsiya.net/blog/ai-borked-keyboard/", "published_at": "2026-04-13T06:07:00+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81989c7797", "title": "Manual Context is a Bug", "url": "https://parsiya.net/blog/manual-context-is-a-bug/", "published_at": "2026-03-31T09:55:00+00:00" }, { "id": "01a087bc-f647-7161-93af-1e819999b84e", "title": "AI-Native SARIF", "url": "https://parsiya.net/blog/ai-native-sarif/", "published_at": "2025-12-12T02:00:00+00:00" }, { "id": "01a087bc-f647-7161-93af-1e819a8f163f", "title": "WTF is ... - AI-Native SAST?", "url": "https://parsiya.net/blog/wtf-is-ai-native-sast/", "published_at": "2025-10-31T08:00:00+00:00" }, { "id": "01a087bc-f647-7161-93af-1e819acd0035", "title": "So You Wanna Use Your Own LLMs in GitHub Copilot Chat", "url": "https://parsiya.net/blog/litellm-ghc-aad/", "published_at": "2025-09-03T14:00:00+00:00" }, { "id": "01a087bc-f647-7161-93af-1e819ba6202d", "title": "Kusto Detective Agency: Echoes of Deception - 0-8 Solves", "url": "https://parsiya.net/blog/2025-kda-echoes/", "published_at": "2025-09-02T03:00:00+00:00" }, { "id": "01a087bc-f647-7161-93af-1e819c948a0c", "title": "How Burp AI Works", "url": "https://parsiya.net/blog/2025-08-15-how-burp-ai-works/", "published_at": "2025-08-15T07:10:43+00:00" }, { "id": "01a087bc-f647-7161-93af-1e819c993f4d", "title": "Kusto-Mice: Optimizing Kusto joins", "url": "https://parsiya.net/blog/kusto-mice-join-optimization/", "published_at": "2025-05-18T21:52:43+00:00" }, { "id": "01a087bc-f647-7161-93af-1e819d78cd92", "title": "Steam's 'Open in Desktop' Button", "url": "https://parsiya.net/blog/steam-open-desktop/", "published_at": "2024-09-20T02:45:53+00:00" }, { "id": "01a087bc-f647-7161-93af-1e819d82f856", "title": "Knee Deep in tree-sitter CST", "url": "https://parsiya.net/blog/knee-deep-tree-sitter-2/", "published_at": "2024-04-09T20:35:35+00:00" }, { "id": "01a087bc-f647-7161-93af-1e819e201995", "title": "Knee Deep in tree-sitter Queries", "url": "https://parsiya.net/blog/knee-deep-tree-sitter-queries/", "published_at": "2024-03-19T23:35:30+00:00" }, { "id": "01a087bc-f647-7161-93af-1e819e81247f", "title": "A Few Fun Semgrep Experiments", "url": "https://parsiya.net/blog/semgrep-fun/", "published_at": "2024-01-21T10:32:24+00:00" }, { "id": "01a087bc-f647-7161-93af-1e819f327b4e", "title": "Some SANS Holiday Hack 2023 Solutions", "url": "https://parsiya.net/blog/sans-holiday-hack-2023/", "published_at": "2024-01-10T20:29:17+00:00" }, { "id": "01a087bc-f647-7161-93af-1e819f87d4c3", "title": "Semgrep's Experimental Rule Syntax", "url": "https://parsiya.net/blog/2023-10-28-semgreps-experimental-rule-syntax/", "published_at": "2023-10-28T19:43:08+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a08019fc", "title": "Some SANS Holiday Hack 2022 Solutions", "url": "https://parsiya.net/blog/sans-holiday-hack-2022/", "published_at": "2023-01-19T20:29:17+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a0d1e6c7", "title": "YAML Wrangling with Rust", "url": "https://parsiya.net/blog/2022-10-16-yaml-wrangling-with-rust/", "published_at": "2022-10-16T18:43:58+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a0d4eaf7", "title": "Code Review Hot Spots with Semgrep", "url": "https://parsiya.net/blog/2022-04-07-code-review-hot-spots-with-semgrep/", "published_at": "2022-04-07T19:51:57+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a1cd8b26", "title": "Security Nightmares of Game Package Managers", "url": "https://parsiya.net/blog/2022-02-07-security-nightmares-of-game-package-managers/", "published_at": "2022-02-08T06:37:59+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a2661e13", "title": "Some SANS Holiday Hack 2021 Solutions", "url": "https://parsiya.net/blog/2022-01-21-some-sans-holiday-hack-2021-solutions/", "published_at": "2022-01-22T04:06:21+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a27164f3", "title": "RCE in Visual Studio Code's Remote WSL for Fun and Negative Profit", "url": "https://parsiya.net/blog/2021-12-20-rce-in-visual-studio-codes-remote-wsl-for-fun-and-negative-profit/", "published_at": "2021-12-20T11:22:10+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a2fcbfa2", "title": "A Hands-On Intro to Semgrep's Autofix", "url": "https://parsiya.net/blog/2021-10-25-a-hands-on-intro-to-semgreps-autofix/", "published_at": "2021-10-26T03:00:47+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a31427bb", "title": "Modify GitLab Repositories from the CI Pipeline", "url": "https://parsiya.net/blog/2021-10-11-modify-gitlab-repositories-from-the-ci-pipeline/", "published_at": "2021-10-11T08:12:58+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a37745f4", "title": "Attack Surface Analysis - Part 3 - Resurrected Code Execution", "url": "https://parsiya.net/blog/2021-09-26-attack-surface-analysis-part-3-resurrected-code-execution/", "published_at": "2021-09-27T03:50:38+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a3b43b66", "title": "The Thick Client Vulns That Weren't", "url": "https://parsiya.net/blog/2021-07-30-the-thick-client-vulns-that-werent/", "published_at": "2021-07-31T03:30:59+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a400eccd", "title": "Semgrep: The Surgical Static Analysis Tool", "url": "https://parsiya.net/blog/2021-06-22-semgrep-the-surgical-static-analysis-tool/", "published_at": "2021-06-23T01:42:06+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a4b9e035", "title": "The JavaScript Bridge in Modern Desktop Applications", "url": "https://parsiya.net/blog/2021-06-08-the-javascript-bridge-in-modern-desktop-applications/", "published_at": "2021-06-08T07:53:25+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a59cd2db", "title": "Public Remote File Share in The Cloud", "url": "https://parsiya.net/blog/2021-05-31-public-remote-file-share-in-the-cloud/", "published_at": "2021-05-31T17:20:40+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a5f02498", "title": "Testing Extensions in Chromium Browsers - Nordpass", "url": "https://parsiya.net/blog/2021-04-30-testing-extensions-in-chromium-browsers-nordpass/", "published_at": "2021-04-30T21:20:40+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a60ed820", "title": "Attack Surface Analysis - Part 2 - Custom Protocol Handlers", "url": "https://parsiya.net/blog/2021-03-17-attack-surface-analysis-part-2-custom-protocol-handlers/", "published_at": "2021-03-17T23:14:00+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a617e1a9", "title": "Automagically Deploying Websites with Custom Domains to GitHub Pages", "url": "https://parsiya.net/blog/2021-02-17-automagically-deploying-websites-with-custom-domains-to-github-pages/", "published_at": "2021-02-17T17:56:33+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a61e12e5", "title": "Some SANS Holiday Hack 2020 Solutions", "url": "https://parsiya.net/blog/2021-01-17-some-sans-holiday-hack-2020-solutions/", "published_at": "2021-01-17T19:33:47+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a68c9706", "title": "Attack Surface Analysis - Part 1 - Application Update:\n'A Novel Way to Bypass Executable Signature Checks with Electron'", "url": "https://parsiya.net/blog/2021-01-08-attack-surface-analysis-part-1-application-update-a-novel-way-to-bypass-executable-signature-checks-with-electron/", "published_at": "2021-01-09T06:33:32+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a755fdc2", "title": "The $15000 PlayStation Bounty", "url": "https://parsiya.net/blog/2021-01-01-the-15000-playstation-bounty/", "published_at": "2021-01-01T23:29:00+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a761d777", "title": "Customizing Python's SimpleHTTPServer", "url": "https://parsiya.net/blog/2020-11-15-customizing-pythons-simplehttpserver/", "published_at": "2020-11-16T04:57:46+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a78bede3", "title": "The Same-Origin Policy Gone Wild", "url": "https://parsiya.net/blog/2020-11-01-the-same-origin-policy-gone-wild/", "published_at": "2020-11-02T04:02:53+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a7d590da", "title": "localghost: Escaping the Browser Sandbox Without 0-Days", "url": "https://parsiya.net/blog/2020-08-13-localghost-escaping-the-browser-sandbox-without-0-days/", "published_at": "2020-08-14T03:38:06+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a7e2129f", "title": "No, You Are Not Getting a CVE for That", "url": "https://parsiya.net/blog/2020-07-25-no-you-are-not-getting-a-cve-for-that/", "published_at": "2020-07-25T23:21:15+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a7f70100", "title": "Thick Client Proxying - Part 11 - GOG Galaxy and Extract-SNI", "url": "https://parsiya.net/blog/2020-06-22-thick-client-proxying-part-11-gog-galaxy-and-extract-sni/", "published_at": "2020-06-22T16:49:35+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a8a96492", "title": "Go Slices and Their Oddities", "url": "https://parsiya.net/blog/2020-05-17-go-slices-and-their-oddities/", "published_at": "2020-05-18T05:37:21+00:00" }, { "id": "01a087bc-f647-7161-93af-1e81a9584793", "title": "Thick Client Proxying - Part 10 - The hosts File", "url": "https://parsiya.net/blog/2020-05-09-thick-client-proxying-part-10-the-hosts-file/", "published_at": "2020-05-09T20:01:59+00:00" }, { "id": "01a087bc-f648-7085-80f7-c425734ca430", "title": "Towards a Quieter Burp History", "url": "https://parsiya.net/blog/2020-05-01-towards-a-quieter-burp-history/", "published_at": "2020-05-02T06:13:24+00:00" }, { "id": "01a087bc-f648-7085-80f7-c425741f2970", "title": "The Encrypted Logz - Some Simple Reverse Engineering", "url": "https://parsiya.net/blog/2020-04-17-the-encrypted-logz-some-simple-reverse-engineering/", "published_at": "2020-04-18T00:30:22+00:00" }, { "id": "01a087bc-f648-7085-80f7-c425748866a7", "title": "The Golang int and the Overlooked Bug", "url": "https://parsiya.net/blog/2020-04-05-the-golang-int-and-the-overlooked-bug/", "published_at": "2020-04-05T08:19:36+00:00" }, { "id": "01a087bc-f648-7085-80f7-c42574e9a7d6", "title": "Time Management For Systems Administrators - Lessons Learned", "url": "https://parsiya.net/blog/2020-03-13-time-management-for-systems-administrators-lessons-learned/", "published_at": "2020-03-14T02:25:18+00:00" }, { "id": "01a087bc-f648-7085-80f7-c42575e5a011", "title": "Old ContextIS Challenge Solutions", "url": "https://parsiya.net/blog/2020-02-09-old-contextis-challenge-solutions/", "published_at": "2020-02-10T03:08:07+00:00" }, { "id": "01a087bc-f648-7085-80f7-c425765a63ea", "title": "Documentation Writing for System Administrators - Notes", "url": "https://parsiya.net/blog/2020-02-06-documentation-writing-for-system-administrators-notes/", "published_at": "2020-02-07T07:21:57+00:00" }, { "id": "01a087bc-f648-7085-80f7-c425767d304b", "title": "Some SANS Holiday Hack 2019 Solutions", "url": "https://parsiya.net/blog/2020-01-15-some-sans-holiday-hack-2019-solutions/", "published_at": "2020-01-15T08:09:11+00:00" }, { "id": "01a087bc-f648-7085-80f7-c42576d8f042", "title": "Using Mozilla Rhino to Run JavaScript in Java", "url": "https://parsiya.net/blog/2019-12-22-using-mozilla-rhino-to-run-javascript-in-java/", "published_at": "2019-12-23T04:13:09+00:00" }, { "id": "01a087bc-f648-7085-80f7-c42577887f82", "title": "Developing and Debugging Java Burp Extensions with Visual Studio Code", "url": "https://parsiya.net/blog/2019-12-02-developing-and-debugging-java-burp-extensions-with-visual-studio-code/", "published_at": "2019-12-03T03:32:09+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4257855ff0b", "title": "Swing in Python Burp Extensions - Part 3 - Tips and Tricks", "url": "https://parsiya.net/blog/2019-11-26-swing-in-python-burp-extensions-part-3-tips-and-tricks/", "published_at": "2019-11-26T08:24:37+00:00" }, { "id": "01a087bc-f648-7085-80f7-c42579385991", "title": "Swing in Python Burp Extensions - Part 2 - NetBeans and TableModels", "url": "https://parsiya.net/blog/2019-11-11-swing-in-python-burp-extensions-part-2-netbeans-and-tablemodels/", "published_at": "2019-11-11T20:00:53+00:00" }, { "id": "01a087bc-f648-7085-80f7-c42579a39165", "title": "Swing in Python Burp Extensions - Part 1", "url": "https://parsiya.net/blog/2019-11-04-swing-in-python-burp-extensions-part-1/", "published_at": "2019-11-04T07:40:42+00:00" }, { "id": "01a087bc-f648-7085-80f7-c42579a5ca6d", "title": "Quality of Life Tips and Tricks - Burp Suite", "url": "https://parsiya.net/blog/2019-10-13-quality-of-life-tips-and-tricks-burp-suite/", "published_at": "2019-10-14T03:48:26+00:00" }, { "id": "01a087bc-f648-7085-80f7-c42579bc28ce", "title": "Disabling Cascade Fan's Beep", "url": "https://parsiya.net/blog/2019-07-28-disabling-cascade-fans-beep/", "published_at": "2019-07-28T20:23:50+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4257a3e66a5", "title": "Chaining Three Bugs to Get RCE in Microsoft AttackSurfaceAnalyzer", "url": "https://parsiya.net/blog/2019-06-18-chaining-three-bugs-to-get-rce-in-microsoft-attacksurfaceanalyzer/", "published_at": "2019-06-18T20:03:53+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4257a758218", "title": "Thick Client Proxying - Part 9 - The Windows DNS Cache", "url": "https://parsiya.net/blog/2019-04-28-thick-client-proxying-part-9-the-windows-dns-cache/", "published_at": "2019-04-28T20:35:00+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4257b45bf12", "title": "Disabling Burp's Update Screen - Part 1 - Analysis and Failures", "url": "https://parsiya.net/blog/2019-04-21-disabling-burps-update-screen-part-1-analysis-and-failures/", "published_at": "2019-04-21T21:58:50+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4257b7b1c08", "title": "The Dark Side of \"Manual Work is a Bug\"", "url": "https://parsiya.net/blog/2019-04-17-the-dark-side-of-manual-work-is-a-bug/", "published_at": "2019-04-18T02:12:33+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4257c6c900c", "title": "Hiding OPTIONS - An Adventure in Dealing with Burp Proxy in an Extension", "url": "https://parsiya.net/blog/2019-04-06-hiding-options-an-adventure-in-dealing-with-burp-proxy-in-an-extension/", "published_at": "2019-04-06T22:30:16+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4257c842f13", "title": "path.Join Considered Harmful", "url": "https://parsiya.net/blog/2019-03-09-path.join-considered-harmful/", "published_at": "2019-03-10T01:43:40+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4257d270da5", "title": "Cheating at Moonlighter - Part 4 - Defense", "url": "https://parsiya.net/blog/2019-01-31-cheating-at-moonlighter-part-4-defense/", "published_at": "2019-02-01T02:11:32+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4257d29fe7b", "title": "Cheating at Moonlighter - Part 3 - Enabling Debug HUD", "url": "https://parsiya.net/blog/2019-01-29-cheating-at-moonlighter-part-3-enabling-debug-hud/", "published_at": "2019-01-30T03:52:01+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4257dcfa3d1", "title": "Cheating at Moonlighter - Part 2 - Changing Game Logic with dnSpy", "url": "https://parsiya.net/blog/2019-01-27-cheating-at-moonlighter-part-2-changing-game-logic-with-dnspy/", "published_at": "2019-01-28T01:47:30+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4257e166542", "title": "Cheating at Moonlighter - Part 1 - Save File", "url": "https://parsiya.net/blog/2019-01-23-cheating-at-moonlighter-part-1-save-file/", "published_at": "2019-01-24T01:03:08+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4257e373112", "title": "Notes on Escaping Python Shells", "url": "https://parsiya.net/blog/2019-01-19-notes-on-escaping-python-shells/", "published_at": "2019-01-20T03:29:43+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4257f06d964", "title": "SANS Holiday Hack Challenge 2018 Solutions", "url": "https://parsiya.net/blog/2019-01-15-sans-holiday-hack-challenge-2018-solutions/", "published_at": "2019-01-16T00:33:21+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4257f1439f3", "title": "Cloudflare Concise Christmas Cryptography Challenges 2019 Solutions", "url": "https://parsiya.net/blog/2019-01-03-cloudflare-concise-christmas-cryptography-challenges-2019-solutions/", "published_at": "2019-01-04T01:24:15+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4257f1573fc", "title": "Cryptography in Python Burp Extensions", "url": "https://parsiya.net/blog/2018-12-24-cryptography-in-python-burp-extensions/", "published_at": "2018-12-24T06:00:14+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4257f991f11", "title": "AES-CFB128: PyCrypto vs. Go", "url": "https://parsiya.net/blog/2018-12-22-aes-cfb128-pycrypto-vs.-go/", "published_at": "2018-12-23T00:25:10+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4257fcc652a", "title": "Python Utility Modules for Burp Extensions", "url": "https://parsiya.net/blog/2018-12-19-python-utility-modules-for-burp-extensions/", "published_at": "2018-12-20T03:48:10+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4258027f217", "title": "Tiredful API - Part 2 - Comparing Site Maps with Burp", "url": "https://parsiya.net/blog/2018-12-17-tiredful-api-part-2-comparing-site-maps-with-burp/", "published_at": "2018-12-17T06:11:11+00:00" }, { "id": "01a087bc-f648-7085-80f7-c42580b22a38", "title": "Tiredful API - Part 1 - Burp Session Validation with Macros", "url": "https://parsiya.net/blog/2018-12-11-tiredful-api-part-1-burp-session-validation-with-macros/", "published_at": "2018-12-11T05:15:07+00:00" }, { "id": "01a087bc-f648-7085-80f7-c425815e7c2c", "title": "Cheap Integrity Checks with HEAD", "url": "https://parsiya.net/blog/2018-12-04-cheap-integrity-checks-with-head/", "published_at": "2018-12-05T03:51:03+00:00" }, { "id": "01a087bc-f648-7085-80f7-c42581673ad0", "title": "Pointers Inside for", "url": "https://parsiya.net/blog/2018-11-18-pointers-inside-for/", "published_at": "2018-11-18T21:57:24+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4258225cd5b", "title": "filepath.Ext Notes", "url": "https://parsiya.net/blog/2018-11-10-filepath.ext-notes/", "published_at": "2018-11-10T05:59:58+00:00" }, { "id": "01a087bc-f648-7085-80f7-c42582c30472", "title": "Windows Filetime Timestamps and Byte Wrangling with Go", "url": "https://parsiya.net/blog/2018-11-01-windows-filetime-timestamps-and-byte-wrangling-with-go/", "published_at": "2018-11-01T12:05:47+00:00" }, { "id": "01a087bc-f648-7085-80f7-c42583178bf3", "title": "Blackfriday's Parser and Generating graphs with gographviz", "url": "https://parsiya.net/blog/2018-10-28-blackfridays-parser-and-generating-graphs-with-gographviz/", "published_at": "2018-10-28T15:31:34+00:00" }, { "id": "01a087bc-f648-7085-80f7-c42583a48ed4", "title": "DEF CON 26 - Tineola - Youtube Video", "url": "https://parsiya.net/blog/2018-10-26-def-con-26-tineola-youtube-video/", "published_at": "2018-10-27T01:56:22+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4258480076f", "title": "Gophercises - Lessons Learned", "url": "https://parsiya.net/blog/2018-10-06-gophercises-lessons-learned/", "published_at": "2018-10-06T04:22:58+00:00" }, { "id": "01a087bc-f648-7085-80f7-c425856e0657", "title": "Reflections on \"Manual Work is a Bug\"", "url": "https://parsiya.net/blog/2018-10-03-reflections-on-manual-work-is-a-bug/", "published_at": "2018-10-03T04:48:17+00:00" }, { "id": "01a087bc-f648-7085-80f7-c42585ac1fa3", "title": "Tineola: Taking a Bite out of Enterprise Blockchain", "url": "https://parsiya.net/blog/2018-09-27-tineola-taking-a-bite-out-of-enterprise-blockchain/", "published_at": "2018-09-27T05:17:59+00:00" }, { "id": "01a087bc-f648-7085-80f7-c42586280fc2", "title": "DVTA - Part 5 - Client-side Storage and DLL Hijacking", "url": "https://parsiya.net/blog/2018-08-25-dvta-part-5-client-side-storage-and-dll-hijacking/", "published_at": "2018-08-25T17:49:10+00:00" }, { "id": "01a087bc-f648-7085-80f7-c42586ed499c", "title": "Committing Insurance Fraud with Tineola", "url": "https://parsiya.net/blog/2018-08-23-committing-insurance-fraud-with-tineola/", "published_at": "2018-08-24T01:18:32+00:00" }, { "id": "01a087bc-f648-7085-80f7-c42587bfa5fb", "title": "DVTA - Part 4 - Traffic Tampering with dnSpy", "url": "https://parsiya.net/blog/2018-08-02-dvta-part-4-traffic-tampering-with-dnspy/", "published_at": "2018-08-02T23:41:54+00:00" }, { "id": "01a087bc-f648-7085-80f7-c425885b9008", "title": "DVTA - Part 3 - Network Recon", "url": "https://parsiya.net/blog/2018-07-30-dvta-part-3-network-recon/", "published_at": "2018-07-30T04:35:57+00:00" }, { "id": "01a087bc-f648-7085-80f7-c42588cc7672", "title": "DVTA - Part 2 - Cert Pinning and Login Button", "url": "https://parsiya.net/blog/2018-07-21-dvta-part-2-cert-pinning-and-login-button/", "published_at": "2018-07-21T05:38:50+00:00" }, { "id": "01a087bc-f648-7085-80f7-c42589beb224", "title": "DVTA - Part 1 - Setup", "url": "https://parsiya.net/blog/2018-07-15-dvta-part-1-setup/", "published_at": "2018-07-16T01:26:41+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4258a847333", "title": "Istanbul Tips and Tricks", "url": "https://parsiya.net/blog/2018-07-04-istanbul-tips-and-tricks/", "published_at": "2018-07-04T09:56:48+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4258b743619", "title": "ContextIS xmas CTF Writeup", "url": "https://parsiya.net/blog/2018-06-05-contextis-xmas-ctf-writeup/", "published_at": "2018-06-06T02:34:55+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4258bffdf3d", "title": "On Username Enumeration", "url": "https://parsiya.net/blog/2018-05-26-on-username-enumeration/", "published_at": "2018-05-27T01:51:48+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4258c301fbc", "title": "Learning Go-Fuzz 2: goexif2", "url": "https://parsiya.net/blog/2018-05-05-learning-go-fuzz-2-goexif2/", "published_at": "2018-05-05T22:01:09+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4258d09390a", "title": "Learning Go-Fuzz 1: iprange", "url": "https://parsiya.net/blog/2018-04-29-learning-go-fuzz-1-iprange/", "published_at": "2018-04-29T23:25:10+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4258e010f6f", "title": "Semi-Automated Cloning: Pain-Free Knowledge Base Creation", "url": "https://parsiya.net/blog/2018-04-24-semi-automated-cloning-pain-free-knowledge-base-creation/", "published_at": "2018-04-25T01:18:32+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4258edd0879", "title": "Deploying my Knowledge Base at parsiya.io to S3 with Travis CI", "url": "https://parsiya.net/blog/2018-04-24-deploying-my-knowledge-base-at-parsiya.io-to-s3-with-travis-ci/", "published_at": "2018-04-24T05:02:03+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4258f34a544", "title": "Adding Custom Chroma Styles to Hugo Themes", "url": "https://parsiya.net/blog/2018-04-15-adding-custom-chroma-styles-to-hugo-themes/", "published_at": "2018-04-15T17:38:57+00:00" }, { "id": "01a087bc-f648-7085-80f7-c4258f81d275", "title": "Blockchain Security Talk at NoVA Hackers", "url": "https://parsiya.net/blog/2018-03-17-blockchain-security-talk-at-nova-hackers/", "published_at": "2018-03-18T00:37:29+00:00" } ] posts Claim your blog

Back to Hackerman's Hacking Tutorials

Blog · corpus.blog/blogs/parsiya.net/posts

Hackerman's Hacking Tutorials

parsiya.net

2026

Preparing My Taxes with AI original ↗

17 Sept 2026

Reverse Engineering Burp Project Format original ↗

7 Sept 2026

Brain the Size of a Planet: Are LLMs Thonking too Hard?original ↗

17 Jun 2026

Harnessing the Wayward Machine-God, 1: Manual Markdown Cleanup Is a Bug original ↗

21 Apr 2026

AI Borked my Keyboard - Reversing the Aula F108 Pro Software original ↗

13 Apr 2026

Manual Context is a Bug original ↗

31 Mar 2026

2025

AI-Native SARIF original ↗

12 Dec 2025

WTF is ... - AI-Native SAST?original ↗

31 Oct 2025

So You Wanna Use Your Own LLMs in GitHub Copilot Chat original ↗

3 Sept 2025

Kusto Detective Agency: Echoes of Deception - 0-8 Solves original ↗

2 Sept 2025

How Burp AI Works original ↗

15 Aug 2025

Kusto-Mice: Optimizing Kusto joins original ↗

18 May 2025

2024

Steam's 'Open in Desktop' Button original ↗

20 Sept 2024

Knee Deep in tree-sitter CST original ↗

9 Apr 2024

Knee Deep in tree-sitter Queries original ↗

19 Mar 2024

A Few Fun Semgrep Experiments original ↗

21 Jan 2024

Some SANS Holiday Hack 2023 Solutions original ↗

10 Jan 2024

2023

Semgrep's Experimental Rule Syntax original ↗

28 Oct 2023

Some SANS Holiday Hack 2022 Solutions original ↗

19 Jan 2023

2022

YAML Wrangling with Rust original ↗

16 Oct 2022

Code Review Hot Spots with Semgrep original ↗

7 Apr 2022

Security Nightmares of Game Package Managers original ↗

8 Feb 2022

Some SANS Holiday Hack 2021 Solutions original ↗

22 Jan 2022

2021

RCE in Visual Studio Code's Remote WSL for Fun and Negative Profit original ↗

20 Dec 2021

A Hands-On Intro to Semgrep's Autofix original ↗

26 Oct 2021

Modify GitLab Repositories from the CI Pipeline original ↗

11 Oct 2021

Attack Surface Analysis - Part 3 - Resurrected Code Execution original ↗

27 Sept 2021

The Thick Client Vulns That Weren't original ↗

31 Jul 2021

Semgrep: The Surgical Static Analysis Tool original ↗

23 Jun 2021

The JavaScript Bridge in Modern Desktop Applications original ↗

8 Jun 2021

Public Remote File Share in The Cloud original ↗

31 May 2021

Testing Extensions in Chromium Browsers - Nordpass original ↗

30 Apr 2021

Attack Surface Analysis - Part 2 - Custom Protocol Handlers original ↗

17 Mar 2021

Automagically Deploying Websites with Custom Domains to GitHub Pages original ↗

17 Feb 2021

Some SANS Holiday Hack 2020 Solutions original ↗

17 Jan 2021

Attack Surface Analysis - Part 1 - Application Update: 'A Novel Way to Bypass Executable Signature Checks with Electron'original ↗

9 Jan 2021

The $15000 PlayStation Bounty original ↗

1 Jan 2021

2020

Customizing Python's SimpleHTTPServer original ↗

16 Nov 2020

The Same-Origin Policy Gone Wild original ↗

2 Nov 2020

localghost: Escaping the Browser Sandbox Without 0-Days original ↗

14 Aug 2020

No, You Are Not Getting a CVE for That original ↗

25 Jul 2020

Thick Client Proxying - Part 11 - GOG Galaxy and Extract-SNI original ↗

22 Jun 2020

Go Slices and Their Oddities original ↗

18 May 2020

Thick Client Proxying - Part 10 - The hosts File original ↗

9 May 2020

Towards a Quieter Burp History original ↗

2 May 2020

The Encrypted Logz - Some Simple Reverse Engineering original ↗

18 Apr 2020

The Golang int and the Overlooked Bug original ↗

5 Apr 2020

Time Management For Systems Administrators - Lessons Learned original ↗

14 Mar 2020

Old ContextIS Challenge Solutions original ↗

10 Feb 2020

Documentation Writing for System Administrators - Notes original ↗

7 Feb 2020

Some SANS Holiday Hack 2019 Solutions original ↗

15 Jan 2020

2019

Using Mozilla Rhino to Run JavaScript in Java original ↗

23 Dec 2019

Developing and Debugging Java Burp Extensions with Visual Studio Code original ↗

3 Dec 2019

Swing in Python Burp Extensions - Part 3 - Tips and Tricks original ↗

26 Nov 2019

Swing in Python Burp Extensions - Part 2 - NetBeans and TableModels original ↗

11 Nov 2019

Swing in Python Burp Extensions - Part 1 original ↗

4 Nov 2019

Quality of Life Tips and Tricks - Burp Suite original ↗

14 Oct 2019

Disabling Cascade Fan's Beep original ↗

28 Jul 2019

Chaining Three Bugs to Get RCE in Microsoft AttackSurfaceAnalyzer original ↗

18 Jun 2019

Thick Client Proxying - Part 9 - The Windows DNS Cache original ↗

28 Apr 2019

Disabling Burp's Update Screen - Part 1 - Analysis and Failures original ↗

21 Apr 2019

The Dark Side of "Manual Work is a Bug"original ↗

18 Apr 2019

Hiding OPTIONS - An Adventure in Dealing with Burp Proxy in an Extension original ↗

6 Apr 2019

path.Join Considered Harmful original ↗

10 Mar 2019

Cheating at Moonlighter - Part 4 - Defense original ↗

1 Feb 2019

Cheating at Moonlighter - Part 3 - Enabling Debug HUD original ↗

30 Jan 2019

Cheating at Moonlighter - Part 2 - Changing Game Logic with dnSpy original ↗

28 Jan 2019

Cheating at Moonlighter - Part 1 - Save File original ↗

24 Jan 2019

Notes on Escaping Python Shells original ↗

20 Jan 2019

SANS Holiday Hack Challenge 2018 Solutions original ↗

16 Jan 2019

Cloudflare Concise Christmas Cryptography Challenges 2019 Solutions original ↗

4 Jan 2019

2018

Cryptography in Python Burp Extensions original ↗

24 Dec 2018

AES-CFB128: PyCrypto vs. Go original ↗

23 Dec 2018

Python Utility Modules for Burp Extensions original ↗

20 Dec 2018

Tiredful API - Part 2 - Comparing Site Maps with Burp original ↗

17 Dec 2018

Tiredful API - Part 1 - Burp Session Validation with Macros original ↗

11 Dec 2018

Cheap Integrity Checks with HEAD original ↗

5 Dec 2018

Pointers Inside for original ↗

18 Nov 2018

filepath.Ext Notes original ↗

10 Nov 2018

Windows Filetime Timestamps and Byte Wrangling with Go original ↗

1 Nov 2018

Blackfriday's Parser and Generating graphs with gographviz original ↗

28 Oct 2018

DEF CON 26 - Tineola - Youtube Video original ↗

27 Oct 2018

Gophercises - Lessons Learned original ↗

6 Oct 2018

Reflections on "Manual Work is a Bug"original ↗

3 Oct 2018

Tineola: Taking a Bite out of Enterprise Blockchain original ↗

27 Sept 2018

DVTA - Part 5 - Client-side Storage and DLL Hijacking original ↗

25 Aug 2018

Committing Insurance Fraud with Tineola original ↗

24 Aug 2018

DVTA - Part 4 - Traffic Tampering with dnSpy original ↗

2 Aug 2018

DVTA - Part 3 - Network Recon original ↗

30 Jul 2018

DVTA - Part 2 - Cert Pinning and Login Button original ↗

21 Jul 2018

DVTA - Part 1 - Setup original ↗

16 Jul 2018

Istanbul Tips and Tricks original ↗

4 Jul 2018

ContextIS xmas CTF Writeup original ↗

6 Jun 2018

On Username Enumeration original ↗

27 May 2018

Learning Go-Fuzz 2: goexif2 original ↗

5 May 2018

Learning Go-Fuzz 1: iprange original ↗

29 Apr 2018

Semi-Automated Cloning: Pain-Free Knowledge Base Creation original ↗

25 Apr 2018

Deploying my Knowledge Base at parsiya.io to S3 with Travis CI original ↗

24 Apr 2018

Adding Custom Chroma Styles to Hugo Themes original ↗

15 Apr 2018

Blockchain Security Talk at NoVA Hackers original ↗

18 Mar 2018