Open Source & Developer Tooling
169 views
Open source software that powers real production systems, and the macOS tooling that keeps high-output engineering teams productive.
How to Iterate the COM Running Objects Table in C#
Back in the day I had to do quite a bit of COM / .Net interop. For some reason (and I cannot remember what it was), I need to be able to enumerate the COM running objects table (ROT). I think it was to do with createboject/getobject and trying to synthesis a singleton for an […]
Read more →Scan SSL/TLS Ciphers With nmap and sslscan on macOS
To retrieve a list of the SSL/TLS cipher suites a particular website offers you can either use sslscan or nmap alternatively you can just use nmap (note: i use “-e en0” to bypass zscaler): Another variant (including cert dates, again “-e en0” is used to bypass zscaler):
Read more →
WordPress XMLRPC.PHP Brute Force Testing Guide for macOS
A Comprehensive Security Testing Guide for Mac Users 1. Introduction WordPress xmlrpc.php is a legacy XML-RPC interface that enables remote connections to your WordPress site. While designed for legitimate integrations, this endpoint has become a major security concern due to its susceptibility to brute force attacks and amplification attacks. Understanding how to test your WordPress […]
Read more →Mac Terminal: Scan TLS Certificates with NMAP and SSLScan
The below script will give you basic information on a websites certificate: NMAP is provides a simple way to get a list of available ciphers from a host website / server. Additionally, nmap provides a strength rating of strong, weak, or unknown for each available cipher. First, download the ssl-enum-ciphers.nse nmap script (explanation here). Then from the same […]
Read more →SYN Flood Testing with hping3: A Practical Guide
Getting an application knocked out with a simple SYN flood is both embarrassing and avoidable. Its also very easy to create a SYN flood and so its something you should design against. Below is the hping3 command line that I use to test my services against SYN floods. I have used quite a few mods, […]
Read more →
Dublin Traceroute on macOS: Install & Usage Guide
Modern networks are far more complex than the simple point to point paths of the early internet. Equal Cost Multi Path (ECMP) routing, carrier grade NAT, and load balancing mean that packets from your machine to a destination might traverse entirely different network paths depending on flow hashing algorithms. Traditional traceroute tools simply cannot handle […]
Read more →Mac Command+Tab: Restore Minimised Windows Like Windows
For those who like to maximise or minimise their windows on a Mac, you will likely be frustrated by the default behaviour of your Macbook (in that it doesn’t restore/focus minimised or maximised screens). Below are a few steps to make your mac screen restores behave like Microsoft Windows: Install Homebrew (if you dont have): […]
Read more →NMAP + Claude MCP: 20 Vulnerability Scans on macOS
Introduction NMAP (Network Mapper) is one of the most powerful and versatile network scanning tools available for security professionals, system administrators, and ethical hackers. When combined with Claude through the Model Context Protocol (MCP), it becomes an even more powerful tool, allowing you to leverage AI to intelligently analyze scan results, suggest scanning strategies, and […]
Read more →host Command DNS Queries on macOS: 9 Examples
1. Find a list of IP addresses linked to a domain To find the IP address for a particular domain, simply pass the target domain name as an argument after the host command. For a comprehensive lookup using the verbose mode, use -a or -v flag option. The -a option is used to find all Domain records and Zone […]
Read more →
Java’s NullPointerException Problem: Causes and Fixes
Every Java developer has seen it. The stack trace that ends conversations. The production incident that ruins a Friday afternoon. The crash that leads to the post-mortem nobody wants to write. NullPointerException. Three words that have probably cost the industry more money, time, and credibility than any other single class of bug in software history. […]
Read more →
PostgreSQL Prepared Statements: Fix Plan Caching Memory Issues
Prepared statements are one of PostgreSQL’s most powerful features for query optimization. By parsing and planning queries once, then reusing those plans for subsequent executions, they can dramatically improve performance. But this optimization comes with a hidden danger: sometimes caching the same plan for every execution can lead to catastrophic memory exhaustion and performance degradation. […]
Read more →Shift+Click Dock Icon to Cycle App Windows on macOS
If you run multiple Chrome profiles or keep several windows open per app, switching between them on macOS becomes irritating fast. Clicking the Dock icon only brings the app forward. Clicking it again does nothing useful. So you right click, scan the window list, and manually choose the one you want. It breaks flow and […]
Read more →