56,966 blogs · [ { "id": "01a0d193-c7f8-728e-a0d4-205b5a05a70a", "title": "RSI vs The Real World", "url": "https://scriptjunkie.us/2026/09/rsi-vs-the-real-world/", "published_at": "2026-09-14T19:51:01+00:00" }, { "id": "01a087dd-1255-713f-bccc-c09a88138779", "title": "Tracking Signal Identifiers", "url": "https://scriptjunkie.us/2026/01/tracking-signal-identifiers/", "published_at": "2026-01-29T05:52:36+00:00" }, { "id": "01a087dd-1255-713f-bccc-c09a88b29454", "title": "schadnfreude", "url": "https://scriptjunkie.us/2021/11/schadnfreude/", "published_at": "2021-11-05T19:27:09+00:00" }, { "id": "01a087dd-1255-713f-bccc-c09a88d9bc2c", "title": "Covert credit calculation communications", "url": "https://scriptjunkie.us/2021/09/covert-credit-calculation-communications/", "published_at": "2021-09-07T02:55:50+00:00" }, { "id": "01a087dd-1255-713f-bccc-c09a89cad34e", "title": "Moving Off Google", "url": "https://scriptjunkie.us/2021/02/moving-off-google/", "published_at": "2021-02-26T05:35:59+00:00" }, { "id": "01a087dd-1255-713f-bccc-c09a8a4b87d1", "title": "rustun – Virtual Not Private Network in 100 Rust lines", "url": "https://scriptjunkie.us/2020/04/rustun-virtual-not-private-network-in-100-rust-lines/", "published_at": "2020-04-01T04:08:22+00:00" }, { "id": "01a087dd-1255-713f-bccc-c09a8a98f20b", "title": "Stream Securely: Simply and Privately Preserving Live Video Evidence", "url": "https://scriptjunkie.us/2020/02/stream-securely-simply-and-privately-preserving-live-video-evidence/", "published_at": "2020-02-25T02:49:04+00:00" }, { "id": "01a087dd-1255-713f-bccc-c09a8b7ce536", "title": "Dispelling Decentralization Doubts", "url": "https://scriptjunkie.us/2020/01/dispelling-decentralization-doubts/", "published_at": "2020-01-17T16:01:13+00:00" }, { "id": "01a087dd-1255-713f-bccc-c09a8bb7457a", "title": "Should there be restrictions on the release of hacking tools?", "url": "https://scriptjunkie.us/2019/12/should-there-be-restrictions-on-the-release-of-hacking-tools/", "published_at": "2019-12-24T05:01:17+00:00" }, { "id": "01a087dd-1255-713f-bccc-c09a8c5b6466", "title": "Interface Identifier (IID) list", "url": "https://scriptjunkie.us/2019/05/interface-identifier-iid-list/", "published_at": "2019-05-11T20:52:28+00:00" }, { "id": "01a087dd-1255-713f-bccc-c09a8d31b9b3", "title": "Windows 10 Decontamination Scripts", "url": "https://scriptjunkie.us/2018/07/windows-10-decontamination-scripts/", "published_at": "2018-07-14T21:43:01+00:00" }, { "id": "01a0ca4f-b4f1-7299-a7ae-c58de12ac460", "title": "Signed Malware", "url": "https://scriptjunkie.us/2018/03/signed-malware/", "published_at": "2018-03-11T05:06:09+00:00" }, { "id": "01a0ca4f-b4f1-7299-a7ae-c58de1d81c7d", "title": "Hack-back in the Real World", "url": "https://scriptjunkie.us/2017/08/hack-back-in-the-real-world/", "published_at": "2017-08-17T20:39:25+00:00" }, { "id": "01a0ca4f-b4f1-7299-a7ae-c58de2007870", "title": "Hoarder", "url": "https://scriptjunkie.us/2017/07/hoarder/", "published_at": "2017-07-14T04:18:01+00:00" }, { "id": "01a0ca4f-b4f1-7299-a7ae-c58de2446370", "title": "Supply Chainsaw: Practical software supply chain attacks for everyone", "url": "https://scriptjunkie.us/2017/04/supply-chainsaw-software-supply-chain-attacks/", "published_at": "2017-04-27T10:57:20+00:00" }, { "id": "01a0ca4f-b4f2-71ee-8e4e-18dc36ca0376", "title": "Goals", "url": "https://scriptjunkie.us/2017/03/goals/", "published_at": "2017-03-11T05:15:51+00:00" }, { "id": "01a0ca4f-b4f2-71ee-8e4e-18dc374d56b6", "title": "Climate Change Archive", "url": "https://scriptjunkie.us/2017/01/climate-change-archive/", "published_at": "2017-01-24T14:03:49+00:00" }, { "id": "01a0ca4f-b4f2-71ee-8e4e-18dc3792d9e0", "title": "Just Too Much Administration – Breaking JEA, PowerShell’s New Security Barrier", "url": "https://scriptjunkie.us/2016/10/just-too-much-administration-breaking-jea-powershells-new-security-barrier/", "published_at": "2016-10-08T20:06:17+00:00" }, { "id": "01a0ca4f-b4f2-71ee-8e4e-18dc37bbac3d", "title": "Intercepting Passwords to Escalate Privileges on OS X", "url": "https://scriptjunkie.us/2016/09/intercepting-passwords-to-escalate-privileges-on-os-x/", "published_at": "2016-09-17T20:11:27+00:00" }, { "id": "01a0ca4f-b4f2-71ee-8e4e-18dc380fa2d2", "title": "The Security Pretend Game – Sudo and Runas", "url": "https://scriptjunkie.us/2016/08/the-security-pretend-game-sudo-and-runas/", "published_at": "2016-08-28T21:52:04+00:00" }, { "id": "01a0ca50-32f7-7318-9e27-216c8b66cf33", "title": "Defying Analysis With Sparse Malware", "url": "https://scriptjunkie.us/2016/08/defying-analysis-with-sparse-malware/", "published_at": "2016-08-19T12:42:43+00:00" }, { "id": "01a0ca50-32f7-7318-9e27-216c8bef84ca", "title": "Using a Fully Untrusted Cloud", "url": "https://scriptjunkie.us/2016/06/using-a-fully-untrusted-cloud/", "published_at": "2016-06-11T03:06:55+00:00" }, { "id": "01a0ca50-32f7-7318-9e27-216c8caeade5", "title": "Yeoman Angular Bootstrap", "url": "https://scriptjunkie.us/2016/03/yeoman-angular-bootstrap/", "published_at": "2016-03-28T02:38:45+00:00" }, { "id": "01a0ca50-32f7-7318-9e27-216c8d39bb1d", "title": "Human Adversaries – Why Information Security Is Unlike Engineering", "url": "https://scriptjunkie.us/2016/01/human-adversaries-why-information-security-is-unlike-engineering/", "published_at": "2016-01-24T02:35:50+00:00" }, { "id": "01a0ca50-32f7-7318-9e27-216c8dea11c3", "title": "Why the government shouldn’t pay for your college (or most other things)", "url": "https://scriptjunkie.us/2015/11/why-the-government-shouldnt-pay-for-your-college-or-most-other-things/", "published_at": "2015-11-15T02:32:24+00:00" }, { "id": "01a0ca50-32f7-7318-9e27-216c8ee72c45", "title": "How I used dead drop C2 to hide malicious traffic", "url": "https://scriptjunkie.us/2015/11/how-i-used-dead-drop-c2-to-hide-malicious-traffic/", "published_at": "2015-11-07T02:30:46+00:00" }, { "id": "01a0ca50-32f7-7318-9e27-216c8ef21786", "title": "Stop doing input validation", "url": "https://scriptjunkie.us/2015/10/stop-doing-input-validation/", "published_at": "2015-10-10T02:29:06+00:00" }, { "id": "01a0ca50-32f7-7318-9e27-216c8fa1f1bd", "title": "On Suicide and Ashley Madison", "url": "https://scriptjunkie.us/2015/09/on-suicide-and-ashley-madison/", "published_at": "2015-09-12T02:27:04+00:00" }, { "id": "01a0ca50-32f7-7318-9e27-216c8ffbabeb", "title": "On Wassenaar", "url": "https://scriptjunkie.us/2015/07/on-wassenaar/", "published_at": "2015-07-22T02:24:42+00:00" }, { "id": "01a0ca50-32f7-7318-9e27-216c9077a087", "title": "Credential Assessment – Mapping Privilege Escalation at Scale", "url": "https://scriptjunkie.us/2015/05/credential-assessment-mapping-privilege-escalation-at-scale/", "published_at": "2015-05-07T02:21:36+00:00" }, { "id": "01a0ca50-6ac3-7372-96d2-367496d1f8c6", "title": "How to run a secret drug empire and hide your incriminating evidence*", "url": "https://scriptjunkie.us/2015/01/how-to-run-a-secret-drug-empire-and-hide-your-incriminating-evidence/", "published_at": "2015-01-31T16:41:18+00:00" }, { "id": "01a0ca50-6ac3-7372-96d2-36749719ba51", "title": "Replacing Passwords With EasyAuth", "url": "https://scriptjunkie.us/2014/10/replacing-passwords-with-easyauth/", "published_at": "2014-10-23T02:52:06+00:00" }, { "id": "01a0ca50-6ac3-7372-96d2-3674979c505e", "title": "Exploiting Ammyy Admin – developing an 0day", "url": "https://scriptjunkie.us/2014/09/exploiting-ammyy-admin-developing-an-0day/", "published_at": "2014-09-11T04:15:11+00:00" }, { "id": "01a0ca50-6ac3-7372-96d2-367498572bac", "title": "Easy Smart Card SSH Setup", "url": "https://scriptjunkie.us/2014/09/easy-smart-card-ssh-setup/", "published_at": "2014-09-04T04:27:32+00:00" }, { "id": "01a0ca50-6ac3-7372-96d2-367498c0ce91", "title": "More Spiders, Fewer Trees: Meterpreter Hop", "url": "https://scriptjunkie.us/2014/07/more-spiders-fewer-trees-meterpreter-hop/", "published_at": "2014-07-30T03:54:14+00:00" }, { "id": "01a0ca50-6ac3-7372-96d2-367498cb3228", "title": "4 practical rules to not get your program hacked", "url": "https://scriptjunkie.us/2014/05/4-practical-rules-to-not-get-your-program-hacked/", "published_at": "2014-05-26T17:32:59+00:00" }, { "id": "01a0ca50-6ac3-7372-96d2-3674997ee58c", "title": "Red Teaming the CCDC", "url": "https://scriptjunkie.us/2014/05/red-teaming-the-ccdc/", "published_at": "2014-05-10T23:30:22+00:00" }, { "id": "01a0ca50-6ac3-7372-96d2-36749a5fc95b", "title": "CCDC and CTFs – Addressing the Criticisms", "url": "https://scriptjunkie.us/2014/03/ccdc-and-ctfs-addressing-the-criticisms/", "published_at": "2014-03-20T21:35:05+00:00" }, { "id": "01a0ca50-6ac3-7372-96d2-36749accb6ee", "title": "March – Pass the Hash Awareness Month", "url": "https://scriptjunkie.us/2014/03/march-pass-the-hash-awareness-month/", "published_at": "2014-03-03T21:52:45+00:00" }, { "id": "01a0ca50-6ac3-7372-96d2-36749b220954", "title": "Installing Linux on a Live Windows System", "url": "https://scriptjunkie.us/2014/02/installing-linux-on-a-live-windows-system/", "published_at": "2014-02-04T09:14:31+00:00" }, { "id": "01a0ca50-b35d-721c-aa11-52d920c9bec6", "title": "A Comparison of HTTPS Reforms", "url": "https://scriptjunkie.us/2013/12/a-comparison-of-https-reforms/", "published_at": "2013-12-11T17:34:59+00:00" }, { "id": "01a0ca50-b35d-721c-aa11-52d920fea1c5", "title": "Adding Easy SSL Client Authentication To Any Webapp", "url": "https://scriptjunkie.us/2013/11/adding-easy-ssl-client-authentication-to-any-webapp/", "published_at": "2013-11-30T20:13:03+00:00" }, { "id": "01a0ca50-b35d-721c-aa11-52d9215bc4dd", "title": "Catching dropped executable files without a sandbox", "url": "https://scriptjunkie.us/2013/10/catching-dropped-executable-files-without-a-sandbox/", "published_at": "2013-10-30T17:14:14+00:00" }, { "id": "01a0ca50-b35d-721c-aa11-52d921e6b35a", "title": "The Infosec Revival – DerbyCon 2013", "url": "https://scriptjunkie.us/2013/09/the-infosec-revival-derbycon-2013/", "published_at": "2013-09-29T16:38:51+00:00" }, { "id": "01a0ca50-b35d-721c-aa11-52d9220db77d", "title": "Remote Desktop and Die – How to RDP Faster Without Getting Robbed", "url": "https://scriptjunkie.us/2013/09/remote-desktop-and-die/", "published_at": "2013-09-14T23:19:52+00:00" }, { "id": "01a0ca50-b35d-721c-aa11-52d92299e877", "title": "Secure random password generation", "url": "https://scriptjunkie.us/2013/09/secure-random-password-generation/", "published_at": "2013-09-08T23:25:00+00:00" }, { "id": "01a0ca50-b35d-721c-aa11-52d922a21556", "title": "Ambush Standalone", "url": "https://scriptjunkie.us/2013/07/ambush-standalone/", "published_at": "2013-07-13T21:18:23+00:00" }, { "id": "01a0ca50-b35d-721c-aa11-52d92385a4be", "title": "Fixing Pass The Hash and 14 Other Problems", "url": "https://scriptjunkie.us/2013/06/fixing-pass-the-hash-and-other-problems/", "published_at": "2013-06-24T23:27:26+00:00" }, { "id": "01a0ca50-b35d-721c-aa11-52d9242d0a23", "title": "Breaking and Building a Secure Network – BSides San Antonio", "url": "https://scriptjunkie.us/2013/05/breaking-and-building-a-secure-network-bsides-san-antonio/", "published_at": "2013-05-08T23:17:56+00:00" }, { "id": "01a0ca50-b35d-721c-aa11-52d9250ea5a7", "title": "Using the GUI in Metasploit 4.6", "url": "https://scriptjunkie.us/2013/04/using-the-gui-in-metasploit-4-6/", "published_at": "2013-04-14T01:10:04+00:00" }, { "id": "01a0ca51-01d5-71a3-bd90-1cd43e4ff03e", "title": "Saving shells with PrependMigrate", "url": "https://scriptjunkie.us/2013/03/saving-shells-with-prependmigrate/", "published_at": "2013-03-24T20:21:49+00:00" }, { "id": "01a0ca51-01d5-71a3-bd90-1cd43ec6d6f7", "title": "Economics in One Lesson", "url": "https://scriptjunkie.us/2013/03/economics-in-one-lesson/", "published_at": "2013-03-13T01:45:11+00:00" }, { "id": "01a0ca51-01d5-71a3-bd90-1cd43f076dd2", "title": "Authenticated Remote Code Execution Methods in Windows", "url": "https://scriptjunkie.us/2013/02/authenticated-remote-code-execution-methods-in-windows/", "published_at": "2013-02-03T15:50:01+00:00" }, { "id": "01a0ca51-01d5-71a3-bd90-1cd43f769514", "title": "Running Code From A Non-Elevated Account At Any Time", "url": "https://scriptjunkie.us/2013/01/running-code-from-a-non-elevated-account-at-any-time/", "published_at": "2013-01-02T02:34:16+00:00" }, { "id": "01a0ca51-01d5-71a3-bd90-1cd44055c4d7", "title": "Attack Test", "url": "https://scriptjunkie.us/2012/12/attack-test/", "published_at": "2012-12-23T03:18:48+00:00" }, { "id": "01a0ca51-01d5-71a3-bd90-1cd440bffa20", "title": "Hoarder, HIPS bypasses, and Ambush", "url": "https://scriptjunkie.us/2012/10/hoarder-hips-bypasses-and-ambush/", "published_at": "2012-10-01T02:57:24+00:00" }, { "id": "01a0ca51-01d5-71a3-bd90-1cd4413285b1", "title": "Vulnerable systems setup", "url": "https://scriptjunkie.us/2012/09/vulnerable-systems-setup/", "published_at": "2012-09-19T01:58:01+00:00" }, { "id": "01a0ca51-01d5-71a3-bd90-1cd44176ab9f", "title": "Shellcode sizes in Metasploit", "url": "https://scriptjunkie.us/2012/08/shellcode-sizes-in-metasploit/", "published_at": "2012-08-11T15:05:53+00:00" }, { "id": "01a0ca51-01d5-71a3-bd90-1cd4421d7334", "title": "Ambush – A New Capability for Advanced Defense", "url": "https://scriptjunkie.us/2012/07/ambush-a-new-capability-for-advanced-defense/", "published_at": "2012-07-29T09:12:53+00:00" }, { "id": "01a0ca51-01d5-71a3-bd90-1cd44242ba19", "title": "Malicious VM to Host Attacks", "url": "https://scriptjunkie.us/2012/05/malicious-vm-to-host-attacks/", "published_at": "2012-05-06T00:46:37+00:00" }, { "id": "01a0ca51-2faa-7217-ba12-57c690357c72", "title": "The Hacker Games", "url": "https://scriptjunkie.us/2012/04/the-hacker-games/", "published_at": "2012-04-04T01:51:34+00:00" }, { "id": "01a0ca51-2faa-7217-ba12-57c6903f26b6", "title": "Direct shellcode execution in MS Office macros", "url": "https://scriptjunkie.us/2012/01/direct-shellcode-execution-in-ms-office-macros/", "published_at": "2012-01-22T12:09:32+00:00" }, { "id": "01a0ca51-2faa-7217-ba12-57c690af065c", "title": "Windows API Function Definitions", "url": "https://scriptjunkie.us/2012/01/windows-api-function-definitions/", "published_at": "2012-01-16T04:45:57+00:00" }, { "id": "01a0ca51-2faa-7217-ba12-57c691476995", "title": "Network Nightmare (Intel)", "url": "https://scriptjunkie.us/2011/12/network-nightmare-intel/", "published_at": "2011-12-17T22:12:44+00:00" }, { "id": "01a0ca51-2faa-7217-ba12-57c691e6b9c5", "title": "Fragerizer – profile-guided load-order disk optimizer", "url": "https://scriptjunkie.us/2011/09/fragerizer/", "published_at": "2011-09-14T04:59:16+00:00" }, { "id": "01a0ca51-2faa-7217-ba12-57c6924f9b65", "title": "Original Source Forgery", "url": "https://scriptjunkie.us/2011/09/original-source-forgery/", "published_at": "2011-09-08T02:29:34+00:00" }, { "id": "01a0ca51-2faa-7217-ba12-57c692ad0744", "title": "Writing Meterpreter Extensions", "url": "https://scriptjunkie.us/2011/08/writing-meterpreter-extensions/", "published_at": "2011-08-27T22:22:34+00:00" }, { "id": "01a0ca51-2faa-7217-ba12-57c6934abbc8", "title": "Custom payloads in Metasploit 4", "url": "https://scriptjunkie.us/2011/08/custom-payloads-in-metasploit-4/", "published_at": "2011-08-14T20:36:27+00:00" }, { "id": "01a0ca51-2faa-7217-ba12-57c693def509", "title": "Network Nightmare – PXE talk at Defcon", "url": "https://scriptjunkie.us/2011/08/network-nightmare/", "published_at": "2011-08-08T00:00:59+00:00" }, { "id": "01a0ca51-2faa-7217-ba12-57c69420f563", "title": "Bypassing DEP/ASLR in browser exploits with McAfee and Symantec", "url": "https://scriptjunkie.us/2011/06/bypassing-dep-aslr-in-browser-exploits-with-mcafee-symantec/", "published_at": "2011-06-28T23:47:45+00:00" }, { "id": "01a0ca51-5fca-720d-ada3-adbfd89291e5", "title": "Firefox Exploit Analyzed", "url": "https://scriptjunkie.us/2011/06/firefox-exploit-analyzed/", "published_at": "2011-06-28T23:37:19+00:00" }, { "id": "01a0ca51-5fca-720d-ada3-adbfd8e15f38", "title": "System Kill", "url": "https://scriptjunkie.us/2011/05/system-kill/", "published_at": "2011-05-12T02:50:48+00:00" }, { "id": "01a0ca51-5fca-720d-ada3-adbfd8f3c4df", "title": "Why Encoding Does not Matter and How Metasploit Generates EXE’s", "url": "https://scriptjunkie.us/2011/04/why-encoding-does-not-matter-and-how-metasploit-generates-exes/", "published_at": "2011-04-15T20:54:32+00:00" }, { "id": "01a0ca51-5fca-720d-ada3-adbfd905634d", "title": "Shells, terminals, and sudo mitm", "url": "https://scriptjunkie.us/2011/04/shells-terminals-and-sudo-mitm/", "published_at": "2011-04-14T02:21:40+00:00" }, { "id": "01a0ca51-5fca-720d-ada3-adbfd90e82e0", "title": "Important Stuff", "url": "https://scriptjunkie.us/2011/03/important-stuff/", "published_at": "2011-03-31T04:37:37+00:00" }, { "id": "01a0ca51-5fca-720d-ada3-adbfd9c9303e", "title": "Java_signed_applet with RJB", "url": "https://scriptjunkie.us/2011/03/java_signed_applet-with-rjb/", "published_at": "2011-03-06T21:04:07+00:00" }, { "id": "01a0ca51-5fca-720d-ada3-adbfda4e2869", "title": "Finding non-ASLR or DEP modules", "url": "https://scriptjunkie.us/2011/03/finding-non-aslr-or-dep-modules/", "published_at": "2011-03-01T05:00:38+00:00" }, { "id": "01a0ca51-5fca-720d-ada3-adbfdabcaafa", "title": "Breaking mobile device crypto with chaos theory and hardware RNG’s", "url": "https://scriptjunkie.us/2011/02/breaking-mobile-device-crypto-with-chaos-theory-and-hardware-rngs/", "published_at": "2011-02-05T23:32:50+00:00" }, { "id": "01a0ca51-5fca-720d-ada3-adbfdac0054c", "title": "Cryptology, Academics, and Chaos", "url": "https://scriptjunkie.us/2011/02/cryptology-academics-and-chaos/", "published_at": "2011-02-04T01:23:17+00:00" }, { "id": "01a0ca51-5fca-720d-ada3-adbfdbaba361", "title": "Black Hat DC Presentation", "url": "https://scriptjunkie.us/2011/01/black-hat-dc-presentation/", "published_at": "2011-01-18T13:25:38+00:00" }, { "id": "01a0ca51-8588-726d-b779-5862318c4073", "title": "Expanding Metasploit RPC and GUI", "url": "https://scriptjunkie.us/2011/01/expanding-metasploit-rpc-and-gui/", "published_at": "2011-01-10T02:48:34+00:00" }, { "id": "01a0ca51-8588-726d-b779-5862320a96c5", "title": "Black Hat & Shmoocon", "url": "https://scriptjunkie.us/2010/12/black-hat-shmoocon/", "published_at": "2010-12-14T00:08:37+00:00" }, { "id": "01a0ca51-8588-726d-b779-586232b39265", "title": "Fun with lnk files", "url": "https://scriptjunkie.us/2010/10/fun-with-lnk-files/", "published_at": "2010-10-16T05:17:41+00:00" }, { "id": "01a0ca51-8588-726d-b779-586232e30180", "title": "Command stagers in Windows", "url": "https://scriptjunkie.us/2010/09/command-stagers-in-windows/", "published_at": "2010-09-27T23:35:42+00:00" }, { "id": "01a0ca51-8588-726d-b779-586233b93806", "title": "Team metasploit and msfgui on Windows", "url": "https://scriptjunkie.us/2010/09/team-metasploit-and-msfgui-on-windows/", "published_at": "2010-09-21T22:47:50+00:00" }, { "id": "01a0ca51-8588-726d-b779-586233e0f9bf", "title": "Sessionthief linux", "url": "https://scriptjunkie.us/2010/09/sessionthief-linux/", "published_at": "2010-09-14T22:35:06+00:00" }, { "id": "01a0ca51-8588-726d-b779-5862343d9574", "title": "Insecure service permission privilege escalation", "url": "https://scriptjunkie.us/2010/08/insecure-service-permission-privilege-escalation/", "published_at": "2010-08-22T22:43:59+00:00" }, { "id": "01a0ca51-8588-726d-b779-58623506033f", "title": "Screwing with Nmap", "url": "https://scriptjunkie.us/2010/08/screwing-with-nmap/", "published_at": "2010-08-20T23:29:01+00:00" }, { "id": "01a0ca51-8588-726d-b779-5862358471ad", "title": "PXE exploitation", "url": "https://scriptjunkie.us/2010/07/pxe-exploitation/", "published_at": "2010-07-30T00:20:50+00:00" }, { "id": "01a0ca51-8588-726d-b779-586235c3ca01", "title": "Sessionthief", "url": "https://scriptjunkie.us/2010/07/sessionthief/", "published_at": "2010-07-17T00:30:37+00:00" }, { "id": "01a0ca51-bbe1-7337-8bcd-6369c837948e", "title": "msfgui – now in metasploit", "url": "https://scriptjunkie.us/2010/07/msfgui-now-in-metasploit/", "published_at": "2010-07-16T22:04:31+00:00" }, { "id": "01a0ca51-bbe1-7337-8bcd-6369c896bbfb", "title": "New msfgui", "url": "https://scriptjunkie.us/2010/05/new-msfgui/", "published_at": "2010-05-27T22:23:36+00:00" }, { "id": "01a0ca51-bbe1-7337-8bcd-6369c95241d6", "title": "Facebook social engineering XSS", "url": "https://scriptjunkie.us/2010/05/facebook-social-engineering-xss/", "published_at": "2010-05-11T18:43:37+00:00" }, { "id": "01a0ca51-bbe1-7337-8bcd-6369c9ccec51", "title": "Maple exploit", "url": "https://scriptjunkie.us/2010/05/maple-exploit/", "published_at": "2010-05-03T22:50:21+00:00" }, { "id": "01a0ca51-bbe1-7337-8bcd-6369ca2d8c8f", "title": "XSS, no really", "url": "https://scriptjunkie.us/2010/04/xss-no-really/", "published_at": "2010-04-15T23:16:17+00:00" }, { "id": "01a0ca51-bbe1-7337-8bcd-6369ca3507be", "title": "EXE injection plus", "url": "https://scriptjunkie.us/2010/03/exe-injection-plus/", "published_at": "2010-03-26T02:31:24+00:00" }, { "id": "01a0ca51-bbe1-7337-8bcd-6369cae005e5", "title": "Metasploit EXE code injection", "url": "https://scriptjunkie.us/2010/03/metasploit-exe-code-injection/", "published_at": "2010-03-22T20:40:29+00:00" }, { "id": "01a0ca51-bbe1-7337-8bcd-6369cb18f575", "title": "Security advice", "url": "https://scriptjunkie.us/2010/03/security-advice/", "published_at": "2010-03-21T00:41:46+00:00" }, { "id": "01a0ca51-bbe1-7337-8bcd-6369cb79a30f", "title": "Google Update", "url": "https://scriptjunkie.us/2010/03/google-update/", "published_at": "2010-03-06T22:39:06+00:00" }, { "id": "01a0ca51-bbe1-7337-8bcd-6369cc15b373", "title": "Shellcode API hashes", "url": "https://scriptjunkie.us/2010/03/shellcode-api-hashes/", "published_at": "2010-03-05T06:09:05+00:00" } ] posts Claim your blog

Back to scriptjunkie.us

Blog · corpus.blog/blogs/scriptjunkie.us/posts

scriptjunkie.us

scriptjunkie.us

2026

RSI vs The Real World original ↗

14 Sept 2026

Tracking Signal Identifiers original ↗

29 Jan 2026

2021

schadnfreude original ↗

5 Nov 2021

Covert credit calculation communications original ↗

7 Sept 2021

Moving Off Google original ↗

26 Feb 2021

2020

rustun – Virtual Not Private Network in 100 Rust lines original ↗

1 Apr 2020

Stream Securely: Simply and Privately Preserving Live Video Evidence original ↗

25 Feb 2020

Dispelling Decentralization Doubts original ↗

17 Jan 2020

2019

Should there be restrictions on the release of hacking tools?original ↗

24 Dec 2019

Interface Identifier (IID) list original ↗

11 May 2019

2018

Windows 10 Decontamination Scripts original ↗

14 Jul 2018

Signed Malware original ↗

11 Mar 2018

2017

Hack-back in the Real World original ↗

17 Aug 2017

Hoarder original ↗

14 Jul 2017

Supply Chainsaw: Practical software supply chain attacks for everyone original ↗

27 Apr 2017

Goals original ↗

11 Mar 2017

Climate Change Archive original ↗

24 Jan 2017

2016

Just Too Much Administration – Breaking JEA, PowerShell’s New Security Barrier original ↗

8 Oct 2016

Intercepting Passwords to Escalate Privileges on OS X original ↗

17 Sept 2016

The Security Pretend Game – Sudo and Runas original ↗

28 Aug 2016

Defying Analysis With Sparse Malware original ↗

19 Aug 2016

Using a Fully Untrusted Cloud original ↗

11 Jun 2016

Yeoman Angular Bootstrap original ↗

28 Mar 2016

Human Adversaries – Why Information Security Is Unlike Engineering original ↗

24 Jan 2016

2015

Why the government shouldn’t pay for your college (or most other things)original ↗

15 Nov 2015

How I used dead drop C2 to hide malicious traffic original ↗

7 Nov 2015

Stop doing input validation original ↗

10 Oct 2015

On Suicide and Ashley Madison original ↗

12 Sept 2015

On Wassenaar original ↗

22 Jul 2015

Credential Assessment – Mapping Privilege Escalation at Scale original ↗

7 May 2015

How to run a secret drug empire and hide your incriminating evidence*original ↗

31 Jan 2015

2014

Replacing Passwords With EasyAuth original ↗

23 Oct 2014

Exploiting Ammyy Admin – developing an 0day original ↗

11 Sept 2014

Easy Smart Card SSH Setup original ↗

4 Sept 2014

More Spiders, Fewer Trees: Meterpreter Hop original ↗

30 Jul 2014

4 practical rules to not get your program hacked original ↗

26 May 2014

Red Teaming the CCDC original ↗

10 May 2014

CCDC and CTFs – Addressing the Criticisms original ↗

20 Mar 2014

March – Pass the Hash Awareness Month original ↗

3 Mar 2014

Installing Linux on a Live Windows System original ↗

4 Feb 2014

2013

A Comparison of HTTPS Reforms original ↗

11 Dec 2013

Adding Easy SSL Client Authentication To Any Webapp original ↗

30 Nov 2013

Catching dropped executable files without a sandbox original ↗

30 Oct 2013

The Infosec Revival – DerbyCon 2013 original ↗

29 Sept 2013

Remote Desktop and Die – How to RDP Faster Without Getting Robbed original ↗

14 Sept 2013

Secure random password generation original ↗

8 Sept 2013

Ambush Standalone original ↗

13 Jul 2013

Fixing Pass The Hash and 14 Other Problems original ↗

24 Jun 2013

Breaking and Building a Secure Network – BSides San Antonio original ↗

8 May 2013

Using the GUI in Metasploit 4.6 original ↗

14 Apr 2013

Saving shells with PrependMigrate original ↗

24 Mar 2013

Economics in One Lesson original ↗

13 Mar 2013

Authenticated Remote Code Execution Methods in Windows original ↗

3 Feb 2013

Running Code From A Non-Elevated Account At Any Time original ↗

2 Jan 2013

2012

Attack Test original ↗

23 Dec 2012

Hoarder, HIPS bypasses, and Ambush original ↗

1 Oct 2012

Vulnerable systems setup original ↗

19 Sept 2012

Shellcode sizes in Metasploit original ↗

11 Aug 2012

Ambush – A New Capability for Advanced Defense original ↗

29 Jul 2012

Malicious VM to Host Attacks original ↗

6 May 2012

The Hacker Games original ↗

4 Apr 2012

Direct shellcode execution in MS Office macros original ↗

22 Jan 2012

Windows API Function Definitions original ↗

16 Jan 2012

2011

Network Nightmare (Intel)original ↗

17 Dec 2011

Fragerizer – profile-guided load-order disk optimizer original ↗

14 Sept 2011

Original Source Forgery original ↗

8 Sept 2011

Writing Meterpreter Extensions original ↗

27 Aug 2011

Custom payloads in Metasploit 4 original ↗

14 Aug 2011

Network Nightmare – PXE talk at Defcon original ↗

8 Aug 2011

Bypassing DEP/ASLR in browser exploits with McAfee and Symantec original ↗

28 Jun 2011

Firefox Exploit Analyzed original ↗

28 Jun 2011

System Kill original ↗

12 May 2011

Why Encoding Does not Matter and How Metasploit Generates EXE’s original ↗

15 Apr 2011

Shells, terminals, and sudo mitm original ↗

14 Apr 2011

Important Stuff original ↗

31 Mar 2011

Java_signed_applet with RJB original ↗

6 Mar 2011

Finding non-ASLR or DEP modules original ↗

1 Mar 2011

Breaking mobile device crypto with chaos theory and hardware RNG’s original ↗

5 Feb 2011

Cryptology, Academics, and Chaos original ↗

4 Feb 2011

Black Hat DC Presentation original ↗

18 Jan 2011

Expanding Metasploit RPC and GUI original ↗

10 Jan 2011

2010

Black Hat & Shmoocon original ↗

14 Dec 2010

Fun with lnk files original ↗

16 Oct 2010

Command stagers in Windows original ↗

27 Sept 2010

Team metasploit and msfgui on Windows original ↗

21 Sept 2010

Sessionthief linux original ↗

14 Sept 2010

Insecure service permission privilege escalation original ↗

22 Aug 2010

Screwing with Nmap original ↗

20 Aug 2010

PXE exploitation original ↗

30 Jul 2010

Sessionthief original ↗

17 Jul 2010

msfgui – now in metasploit original ↗

16 Jul 2010

New msfgui original ↗

27 May 2010

Facebook social engineering XSS original ↗

11 May 2010

Maple exploit original ↗

3 May 2010

XSS, no really original ↗

15 Apr 2010

EXE injection plus original ↗

26 Mar 2010

Metasploit EXE code injection original ↗

22 Mar 2010

Security advice original ↗

21 Mar 2010

Google Update original ↗

6 Mar 2010

Shellcode API hashes original ↗

5 Mar 2010