gehaxelt

Joined 9 years ago

Karma

220

Submissions

38

Member since

May 14

View on Hacker News

Recent submissions

Comment · 3 years ago

It would be great if Github and other large providers could start using SSHFP records [0].

[0] https://www.rfc-editor.org/rfc/rfc4255.html

Ask HN: What are open-source tools companies use?

1 gehaxelt 4 years ago 0 comments

Measuring a Tor Hidden Service's Idle Traffic 0day.work

1 gehaxelt 6 years ago 0 comments

Credentials hiding in plain sight or how I pwned your HTTP auth 0day.work

1 gehaxelt 6 years ago 0 comments

Files on Web Servers Part I: History Files 0day.work

1 gehaxelt 6 years ago 0 comments

Comment · 6 years ago

I've updated the post.

Thanks!

Pwning your web server the easy way or why exposing –/.ssh/ is a bad idea 0day.work

71 gehaxelt 6 years ago 55 comments

Wordpress InfiniteWP Client Admin Authentication Bypass 0day.work

1 gehaxelt 6 years ago 0 comments

Open Redirects in Misconfigured Mod_rewrite Rules (PoC for CVE-2019-10098?) 0day.work

1 gehaxelt 7 years ago 0 comments

Proof of Concept for "viewing unauthenticated posts" in Wordpress 5.2.3 0day.work

2 gehaxelt 7 years ago 0 comments

PoC for “Apache Httpd XSS in mod_proxy error page (CVE-2019-10092)” 0day.work

1 gehaxelt 7 years ago 0 comments

CVE-2019-11360: BufferOverflow in iptables-restore v1.8.2 0day.work

2 gehaxelt 7 years ago 0 comments

A Crash in Unsquashfs 0day.work

1 gehaxelt 7 years ago 0 comments

An example why NAT is NOT security 0day.work

3 gehaxelt 7 years ago 0 comments

Comment · 7 years ago

Yup, you're right on that one.

I don't think I explicitly said that one should use iodine + DoH to bypass captive portals, but sorry if that somehow was implied.

The blogpost was just intended to be an experiment to compare the performance :-)