Security research, field notes, and practical experiments

Writing

Independent technical notes by Willis Vandevanter.

Recent writing

  8. Simple Ruby Exec with Open and Pipe

    I was researching something else and thought this was a cool way to execute a command through the open method in ruby:

    1

    open("|[CMD]")

    The key is starting the open with pipe. For example,

    1

    open("|ls")

    Or to exec and print the …

  • Exploiting XXE Vulnerabilities in OXML Documents - Part 1

    OXML is a common document format; think docx (Microsoft Word Document), pptx (Microsoft Powerpoint), xlsx (Excel Spreadsheet), etc.

    An OXML document is a zip file containing XML files and any media files. When the document is rendered, the rendering library …

  • ldapsearch notes

    I seem to find open LDAP servers on the Internet more often than I should. Here are some notes on using ldapsearch

    Installing ldapsearch on Ubuntu

    1

    apt-get install ldap-utils

    Root-DSE object

    nmap includes a script to gather info from a LDAP root-dse …