iiinova — where your digital self keeps evolving

Mänu

@emanuelduss.ch

IT security. Linux & network protocols. Pentesting web applications, networks & AD infrastructures. Mostly technical stuff here. emanuelduss.ch

Posts Replies Media

Mänu @emanuelduss.ch · 30/08/2026

Nice, there is a new SSH client option -Z in OpenSSH 10.5 that prints the keys that will be tried for public key authentication in the order that they will be used. Manpage: man.openbsd.org/ssh.1#Z So you can see which public keys are disclosed to the remote system. #ssh #openssh

emanuel@x1:~
$ ssh -Z github.com
/home/emanuel/.ssh/id_ed25519_public ED25519 SHA256:2QVdTWNQ5KrMWJ2mqR7qp93Z/czwV/1BXuH+Xu6dVm8 explicit agent
/dev/null explicit

emanuel@x1:~
$ ssh -Z gitlab.com
emanuel@x1 ED25519 SHA256:2QVdTWNQ5KrMWJ2mqR7qp93Z/czwV/1BXuH+Xu6dVm8 agent
/dev/null explicit

emanuel@x1:~
$ ssh -Z 0x00.motd.ch
/home/emanuel/.ssh/id_ed25519_adm-emanuel ED25519 SHA256:kSHX4Ghvh4n64ibiJL838SxJXjdiS2PmJ5nS3iKYUEw explicit
/dev/null explicit

emanuel@x1:~
$ ssh -Z foobar.example.net
/dev/null explicit

030

Mänu @emanuelduss.ch · 23/04/2026

Simple shell function that calls the ip.thc.org service to get subdomains or CNAMEs pointing to a subdomain, or IP addresses pointing to a subdomain: gist.github.com/emanuelduss/... For quick and dirty subdomain enumeration 😀 THX @hackerschoice.bsky.social for this nice service 🤘 #pentest #dns

010

Mänu @emanuelduss.ch · 31/01/2026

This was a really cool and awesome course ❤️! I learned so much in these two days and did a lot of stuff I never did and never heard about before. It was cool when (after some nasty debugging 🫠) the encryption key could finally be sniffed 🤘. Thanks a lot for your training, you guys rock!

Open notebook from the backside where the mainboard can be seen, tiny wires are soldered on the SPI flash. These are soldered to a PCB which is connected to a logic analyzer.

062

Mänu @emanuelduss.ch · 09/01/2026

This is probably the easiest way to perform reverse DNS lookups over IP address ranges using the built-in tool getent and bash brace expansion: getent hosts 130.59.{20,31}.{0..255} Useful if you are on a system/container with limited tools. #pentest #dns #linux

Output of the command showing multiple IP addresses and their hostnames assigned via reverse DNS entries.

040

Mänu @emanuelduss.ch · 03/01/2025

Cool #38c3 talk about bypassing #BitLocker in TPM only mode. A downgrade attack allows you to exploit "bitpixie" again. media.ccc.de/v/38c3-windo... PXE Boot → boot downgraded/vulnerable #Windows boot loader → decrypt disk using TPM → reboot → key stays in memory → boot Linux → read key #pentest

061

Mänu @emanuelduss.ch · 24/12/2024

Also cool is, that Wireshark directly allows you to start an application with this environment variable set. So you can launch a browser from within Wireshark and directly decrypt and analyze the TLS traffic. 😃👌

26926