tlslookieloo 0.1.0 Released

After a few months of working on it on the side tlslookieloo 0.1.0 is finally out the door. I'm releasing it as an alpha version; because, I worked on it alone for the most part. Keane Wolter (@d43m0n3y3, LinkedIn) helped out by reviewing the documentation and smoke tested it on a different platform. Why build … Continue reading tlslookieloo 0.1.0 Released →

Mocking C APIs in testing

I started working on tlslookieloo after failing to find a utility that I can use to basically MITM a client-server application I was testing at work. I looked at sslsniff and Cisco Talos' Mutiny Fuzzing Framework and Decept Proxy to see if it provides what I need, or modify it for my own needs. In … Continue reading Mocking C APIs in testing →

Keeping Upstream and Working git Repos In Sync

This tutorial is intended for git beginners who need to sync up their working repo with changes made to the upstream repo. Cloning repos within collaboration platforms such as gitlab will not be part of this tutorial. Setup For the purposes of this project, we will use https://github.com/w3c-social/activipy as the upstream repository. Create a clone of the project, and … Continue reading Keeping Upstream and Working git Repos In Sync →

A Broader Issue Exposed by CVE-2018-14665

CVE-2018-144665 refers to "An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the ability to log in to the system via physical console to escalate their privileges and run arbitrary code under root privileges." Here's the link to Matthew Hickey's tweet that shows the exploit. I'm not … Continue reading A Broader Issue Exposed by CVE-2018-14665 →