Blogs on DUALUSE

Automating Core AppSec Tooling Dev Loops: Language Model Powered Rule Generation

Wed, 05 Jul 2023 00:00:00 +0000

This technical article explores in depth one way to layer embeddings powered k-nearest-neighbor (kNN) search, retrieval augmented generation, and specialist LLM tools to turn what might take a single engineer a month to complete into a task that completes in 40 minutes and costs less than $10 in OpenAI API credits.

Large Language Models in AppSec: An Innovator’s Primer

Tue, 30 May 2023 00:00:00 +0000

A steady stream of Fear, Uncertainty, and Doubt surrounding Large Language Models (LLMs) dominates the discourse; Leaking IP? Generated code with vulnerabilities? Verbatim extracts from GPL code? Will OpenAI employees learn about your top-secret plans? Will LLMs usher in a new era of cyber-threats? The coverage here is massive - under-amplified is where AI, and LLMs specifically, is posed to make a significant impact on how people and organizations approach application security.

Harnessing the Hive Mind: How Semgrep and Nuclei Are Shaping the Future of Security Engineering

Mon, 27 Mar 2023 00:00:00 +0000

Crowd-sourced, open source, and customization-out-front tools continue to make noise in the security tooling marketplace. These are not new developments. We, of course, know about projects like FindBugs and select projects from OWASP. However, new entrants like Semgrep from r2c and Nuclei from ProjectDiscovery feel different. What has attracted VC funding to these projects, and what’s behind the excitement and buzz generated from practitioners in the security space?

CURRYFINGER - SNI & Host header spoofing utility

Tue, 10 Sep 2019 00:00:00 +0000

CURRYFINGER measures a vanilla request for a particular URL against requests directed to specific IP addresses with forced TLS SNI and HTTP Host headers. The tool takes a string edit distance, and emits matches according to a rough similarity metric threshold.

ALEXATOP - Finding domains in CIDRs

Mon, 09 Sep 2019 00:00:00 +0000

I put this tool together over a weekend in order to produce a dataset for other tools I’m writing. We PoC this against the Alexa top 1m, but you might enjoy using it to find domains that land in other ranges of interest.

DNSPUMP - File delivery over DNS

Fri, 21 Jun 2019 00:00:00 +0000

This tool helps you deliver files to machines entirely over DNS using TXT records. Point ns records at a box, host DNSPUMP and you’re ready to roll.

DNSPUMP was hastily hacked together over the course of two days and relies entirely on the excellence of Miek Gieben’s Go DNS package miekg/dns ¹.

Virtualized Lab; Abuse Cisco DTP to hit VLANs

Tue, 29 Jan 2019 00:00:00 +0000

Layer 2 attacks are ancient and the enlightened world (all 5 of us, including you) has moved on to assume that transport is broken focusing instead on application layer protections. Still, abusing these old Layer 2 defects can be fun, and occasionally the difference between failure and Access¹.

Hashcat'ing XenForo

Mon, 26 Mar 2018 00:00:00 +0000

TL;DR - You can skip right to the results for the code.

A list that recently hit Hashes.org, with 1 million records and a low crack rate, looked like an interesting target, given that the community had recovered less than 0.5% of the list. On taking a closer look, we find out why;