Collaborate Disseminate
The ESP-01 launched the ESP8266 revolution back in 2014, and while today you’re far more likely to see somebody use a later version of the chip in a Wemos or NodeMCU development board, there are still tasks the original chip is well suited for. Unfortunately, they can be tricky to …read more
Continue reading An Adapter to Solve Your ESP-01 Breadboard Woes
While we admit that free honey sounds pretty good, beekeeping is not some set-it-and-forget-it hobby where you can just put bees in a box and come back in a month to collect the goods. With the world’s bee population in decline, it’s more important than ever to monitor the health …read more
Continue reading Bee Counter Will Have You Up to Your Nectar In Hive Data
How can I determine the exact start byte and exact end byte of a LUKS header on a block storage device?
I use Linux Unified Key Setup (LUKS) for Full Disk Encryption (FDE), so all of the data on my drive is encrypted using a strong master… Continue reading How to determine start and end bytes of LUKS header?
The Chrome WebRequests API mentions that specific request headers are not available to the onBeforeSendHeaders event, meaning that extensions cannot read and/or modify these headers. Here is an excerpt from the documentation:
The followin… Continue reading Why does Chrome not allow the modification of these headers by extensions?
I am testing web application which uses JWT, WebSockets and API. In Burp Proxy – HTTP history I can see only JSON, TXT or empty responses like 200 OK after adding content etc and only one HTTP response with login form. Does this make sense… Continue reading Security headers for aplication which uses JWT, WebSockets and API
I have a REST API exposed to the Internet and another application with form-based authentication. These apps are behind a Web Application Firewall.
Question is, where I should implement the below security HTTP headers, in the WAF or at th… Continue reading Secure HTTP Headers – where should be implemented, WAF or code level?
I have recently sat up an Nginx in a way that makes it not return a Server header and hide the version information from the error pages.
The error page looks like that now (and anyone can provoke it by sending wrong HTTP req… Continue reading Is it a security issue that Nginx returns server name in errors?
Technically speaking, it is possible to spoof both headers using an intercepting proxy but that’s useless because we are doing it ourselves as an attacker.
When we send an ajax request using JS from another domain with our s… Continue reading Why is it not possible to spoof referer and origin header with XHR?
I just bypassed SSL pinning on an android application but the problem is application won’t let me play with the request on my intercepting proxy. It says something like problem with your network or check your internet connect… Continue reading Is there any way to keep the request in intercepting proxy for atleast a min before application says check your connection?
In my group we have been asked to implement an authentication-authorization flow in a new web portal that lives in a complex infrastructure.
For historical reason the initial authentication of each user is done by an older “… Continue reading Carrying two authorization tokens in a request