DigiNinja digi.ninja

A 101 on domain fronting along with some examples.

digi.ninja·1252w

I want my blog to reach as wide an audience as possible and to help with that, I'm asking for my readers to make suggestions for changes which will help make th...

digi.ninja·1252w

Using HTTP pipelining to hide requests.

digi.ninja·1252w

Some research on how to hide commands from the bash history.

digi.ninja·1252w

A worked example of setting up domain fronting with Cloudflare using ESNI.

digi.ninja·1252w

A proof of concept demonstration to go with the blog post .

digi.ninja·1252w

A walkthrough of a process which allows off the shelf hardware to automatically acquire a valid TLS certificate on startup.

digi.ninja·1252w

An offer to take some friends running during SteelCon 2019.

digi.ninja·1252w

A story about having to push through elitism to get to the real community.

digi.ninja·1252w

Talking about a way I found to split XSS payloads over multiple inputs to bypass input length limitations and input filtering.

digi.ninja·1252w

The DNS server that WSL2 uses returns records in a different way to a normal DNS server and because of this I ended up trying to log into the wrong server. This...

digi.ninja·1252w

Another update to the Authlab, this time covering how to use John the Ripper and Hashcat to crack the keys used to sign JWTs. For more information, and a walk t...

digi.ninja·1252w

A brief description of how to crack Flask session cookies and an introduction to the Cracked Flask Lab.

digi.ninja·1252w

I've added a new lab for looking at different ways to use HTML5 postMessage and their associated vulnerabilities.

digi.ninja·1252w

Overriding the JavaScript alert function to find a hidden XSS.

digi.ninja·1252w

Log in to enable infinite scrolling