<?xml version="1.0"?>
<!-- https://github.com/hypothesis/h/blob/main/h/templates/rss.xml.jinja2 -->
<rss version="2.0"
     xmlns:atom="http://www.w3.org/2005/Atom"
     xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>SpipM - Technology blog</title>
    <link>https://www.spipm.nl/</link>
    <atom:link href="https://www.spipm.nl/rss.xml" rel="self" type="application/rss+xml" />
    <description>Spip's technology blog</description>
    <pubDate>Fri, 13 Mar 2026 13:33:35 +0000</pubDate>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>

    
    <item>
       <title><![CDATA[Odido-router verzamelt analytics van je huishouden]]></title>
       <description><![CDATA[Dutch technical analysis on how I rooted the router from the ISP Odido to uncover that it is collecting metadata from households.]]></description>
       <pubDate>Sun, 01 Mar 2026 00:00:00 </pubDate>
       <guid isPermaLink="false">7d35da24-8f5d-657c-d099-31893486368d</guid>
       <link>https://www.linkedin.com/pulse/odido-router-verzamelt-analytics-van-je-huishouden-sipke-mellema-0uoie/</link>
    </item>
    
    <item>
       <title><![CDATA[Wij van security adviseren security]]></title>
       <description><![CDATA[Dutch article on the organisational causes of security vulnerabilities.]]></description>
       <pubDate>Sun, 01 Feb 2026 00:00:00 </pubDate>
       <guid isPermaLink="false">28fff1d4-7a76-3c26-1f5b-57d4e61a7615</guid>
       <link>https://www.spipm.nl/2603.html</link>
    </item>
    
    <item>
       <title><![CDATA[Basic XDP firewall]]></title>
       <description><![CDATA[Basic XDP firewall for butsers.nl.]]></description>
       <pubDate>Thu, 01 Jan 2026 00:00:00 </pubDate>
       <guid isPermaLink="false">53333a47-14bd-a6b6-512b-6b4dc3429a43</guid>
       <link>https://github.com/spipm/butsers_xdp</link>
    </item>
    
    <item>
       <title><![CDATA[Post-auth RCE in Adeptia 6.9]]></title>
       <description><![CDATA[An authenticated administrator can execute arbitrary code in AdeptiaSuite 6.9 Enterprise Edition.]]></description>
       <pubDate>Mon, 01 Sep 2025 00:00:00 </pubDate>
       <guid isPermaLink="false">b8d6deb6-868d-7def-50f8-fca8265b76d6</guid>
       <link>https://www.spipm.nl/2530.html</link>
    </item>
    
    <item>
       <title><![CDATA[Tekortkomingen van het CCV-pentestkeurmerk]]></title>
       <description><![CDATA[Dutch article about the shortcomings of the CCV quality mark for pentesting.]]></description>
       <pubDate>Tue, 01 Jul 2025 00:00:00 </pubDate>
       <guid isPermaLink="false">4ae30add-2691-1b6c-b441-e6e76a30d162</guid>
       <link>https://www.spipm.nl/2602.html</link>
    </item>
    
    <item>
       <title><![CDATA[Compressing text messages]]></title>
       <description><![CDATA[About digital and analogue techniques to compress small text messages.]]></description>
       <pubDate>Sat, 01 Feb 2025 00:00:00 </pubDate>
       <guid isPermaLink="false">29d6f9c9-eefa-ae8c-47d2-cc77c3af133d</guid>
       <link>https://www.spipm.nl/2520.html</link>
    </item>
    
    <item>
       <title><![CDATA[OSEP - Fun and challenging but overrated]]></title>
       <description><![CDATA[An article about my OSEP course experience.]]></description>
       <pubDate>Sun, 01 Dec 2024 00:00:00 </pubDate>
       <guid isPermaLink="false">1cc57dd0-5981-42ea-3090-26cc38c61379</guid>
       <link>https://www.spipm.nl/2412.html</link>
    </item>
    
    <item>
       <title><![CDATA[Recovering secrets from IntelliJ plugins]]></title>
       <description><![CDATA[IntelliJ has a deprecated PasswordUtil class that statically xors secrets for storage. Some plugins like Sonarlint (from Sonarqube) still use this outdated class to store passwords and tokens.]]></description>
       <pubDate>Mon, 01 Apr 2024 00:00:00 </pubDate>
       <guid isPermaLink="false">8369c58c-7440-3067-c467-c442edb1d743</guid>
       <link>https://www.spipm.nl/2404.html</link>
    </item>
    
    <item>
       <title><![CDATA[BraekerCTF 2024 source]]></title>
       <description><![CDATA[This is the source code from the BraekerCTF 2024. I always wanted to create a large-scale, high-quality CTF, and I was working on it since Dec 2022. It is a jeopardy-style hacking competition, and it ran from 23 February 2024 to 24 February 2024. Over 700 teams participated.]]></description>
       <pubDate>Thu, 01 Feb 2024 00:00:00 </pubDate>
       <guid isPermaLink="false">4edfca8a-ac41-c52f-b439-d17d39019f9b</guid>
       <link>https://github.com/spipm/BraekerCTF_2024_public</link>
    </item>
    
    <item>
       <title><![CDATA[Pentest report writing guide]]></title>
       <description><![CDATA[Some pentesters struggle to effectively write about pentest results, causing findings and reports to end up in the bin. To create a healthy ecosystem we should share knowledge on what makes a pentest report work. Over the years I have developed my own methods for quickly producing high-quality deliverables. By sharing this knowledge I hope you can improve your writing as well.]]></description>
       <pubDate>Fri, 01 Sep 2023 00:00:00 </pubDate>
       <guid isPermaLink="false">3b52e9b8-1779-3ad2-bbfc-cf4767e9ee95</guid>
       <link>https://github.com/spipm/pentest-report-guide/tree/main</link>
    </item>
    
    <item>
       <title><![CDATA[Argon2 wordlist cracker]]></title>
       <description><![CDATA[Modified the original Argon2 code for some simple password cracking.]]></description>
       <pubDate>Fri, 01 Sep 2023 00:00:00 </pubDate>
       <guid isPermaLink="false">3f11ba67-d9b6-2fc0-535f-a0007f7e9495</guid>
       <link>https://github.com/spipm/argon2_cracker</link>
    </item>
    
    <item>
       <title><![CDATA[Can we restore trust in cryptographic control?]]></title>
       <description><![CDATA[Legislators and technologists have not reached consensus on regulations for cryptographic control. Let's look at arguments, history and the future in order to balance the discussion and to restore trust in controlling cryptography.]]></description>
       <pubDate>Tue, 01 Aug 2023 00:00:00 </pubDate>
       <guid isPermaLink="false">088680ec-cbf0-d180-15d9-7234b3470e8b</guid>
       <link>https://www.spipm.nl/2309.html</link>
    </item>
    
    <item>
       <title><![CDATA[How to save money on a pentest]]></title>
       <description><![CDATA[This short guide aims to aid companies by increasing the cost-effectiveness of penetration testing services.]]></description>
       <pubDate>Wed, 01 Mar 2023 00:00:00 </pubDate>
       <guid isPermaLink="false">eeb84bbf-5f46-2c3b-4208-683d629a2550</guid>
       <link>https://www.spipm.nl/2301.html</link>
    </item>
    
    <item>
       <title><![CDATA[Cracking Oracle Apex password hashes]]></title>
       <description><![CDATA[We'll reverse the Oracle Apex engine and find out how to crack its hashes with hashcat.]]></description>
       <pubDate>Fri, 01 Apr 2022 00:00:00 </pubDate>
       <guid isPermaLink="false">ff68df16-d517-0951-0ecf-a21d14f5216a</guid>
       <link>https://www.spipm.nl/2201.html</link>
    </item>
    
    <item>
       <title><![CDATA[Sharpen your monitoring capabilities with honeypots]]></title>
       <description><![CDATA[I started out with this article to showcase vulnerabilities in honeypot software, but ended up believing that honeypots are the next step in leveling the cyber security playing field.]]></description>
       <pubDate>Wed, 01 Sep 2021 00:00:00 </pubDate>
       <guid isPermaLink="false">5542f97b-43be-8812-9c2f-a1263f2e25e0</guid>
       <link>https://www.spipm.nl/2105.html</link>
    </item>
    
    <item>
       <title><![CDATA[CVE-2021-22524 - DoS via XXE in NetIQ Access Manager]]></title>
       <description><![CDATA[The NetIQ Access Manager was vulnerable to an XXE vulnerablity, allowing attackers to perform a Denial of Service attack on the IAM platform.]]></description>
       <pubDate>Tue, 01 Jun 2021 00:00:00 </pubDate>
       <guid isPermaLink="false">49497e4e-3ebd-c053-29f5-08e8d076a159</guid>
       <link>https://www.microfocus.com/documentation/access-manager/5.0/accessmanager501-release-notes/accessmanager501-release-notes.html</link>
    </item>
    
    <item>
       <title><![CDATA[Harden your security team - Don't trust bug bounty reports]]></title>
       <description><![CDATA[Pro-actively tighten security procedures or your security team might be subject to social engineering attacks.]]></description>
       <pubDate>Mon, 01 Feb 2021 00:00:00 </pubDate>
       <guid isPermaLink="false">0597c552-2c2b-6783-2931-a692f98b0f27</guid>
       <link>https://www.spipm.nl/2101.html</link>
    </item>
    
    <item>
       <title><![CDATA[Recovering passwords from pixelized screenshots]]></title>
       <description><![CDATA[No tools were available for recovering a password from a pixelized screenshot, so I created a Proof of Concept. In this article I explain my algorithm and its implementation, but start with some history and the current state of deblurring techniques.]]></description>
       <pubDate>Tue, 01 Dec 2020 00:00:00 </pubDate>
       <guid isPermaLink="false">49037863-555b-af19-8835-345b17328b56</guid>
       <link>https://www.spipm.nl/2030.html</link>
    </item>
    
    <item>
       <title><![CDATA[Lessons from password policy science]]></title>
       <description><![CDATA[Password expiration and complexity rules are dead. We have proper password policy guidelines for over three years now. Stop trying to fix users and start fixing your infrastructure.]]></description>
       <pubDate>Sat, 01 Aug 2020 00:00:00 </pubDate>
       <guid isPermaLink="false">76926ab9-90d4-a5a5-253a-96c1d8179b18</guid>
       <link>https://www.spipm.nl/2020.html</link>
    </item>
    
    <item>
       <title><![CDATA[A widespread piece of .NET code allowing code execution]]></title>
       <description><![CDATA[ViewState deserialization has been 'fixed' in .NET since 2012, but a vulnerable code snippet for creating a custom compressed ViewState is being passed around on the internet to this day.]]></description>
       <pubDate>Sat, 01 Feb 2020 00:00:00 </pubDate>
       <guid isPermaLink="false">c4747456-2196-7b70-996a-e96b894f2a7e</guid>
       <link>https://www.spipm.nl/2010.html</link>
    </item>
    
    <item>
       <title><![CDATA[Spot The Bug - An Open End]]></title>
       <description><![CDATA[A new Spot The Bug challenge based on a vulnerability I found during an assignment.]]></description>
       <pubDate>Tue, 01 Oct 2019 00:00:00 </pubDate>
       <guid isPermaLink="false">da6baa6f-1f16-3c57-9731-2c33c15a40de</guid>
       <link>https://www.spipm.nl/1970.html</link>
    </item>
    
    <item>
       <title><![CDATA[Temporary intercom hack]]></title>
       <description><![CDATA[The lock of the front door was broken, so I hacked together a way for housemates to open the door via their phones.]]></description>
       <pubDate>Sun, 01 Sep 2019 00:00:00 </pubDate>
       <guid isPermaLink="false">803cb1e7-8279-7a03-4f71-aafc9955e7e3</guid>
       <link>https://www.spipm.nl/1960.html</link>
    </item>
    
    <item>
       <title><![CDATA[Viewing mssql backups files and extracting hashes]]></title>
       <description><![CDATA[How to extract the sa password hash and view the content of the master database from an MSSQL database backup (.bak).]]></description>
       <pubDate>Mon, 01 Jul 2019 00:00:00 </pubDate>
       <guid isPermaLink="false">a90533af-09b4-2140-a2c9-b091e00b7323</guid>
       <link>https://www.spipm.nl/1930.html</link>
    </item>
    
    <item>
       <title><![CDATA[Owning Building Management Systems]]></title>
       <description><![CDATA[When working for Applied Risk I got to contribute to research for hacking Building Mangement Systems. We'd found bugs and created exploits for owning buildings over the internet.]]></description>
       <pubDate>Sat, 01 Jun 2019 00:00:00 </pubDate>
       <guid isPermaLink="false">cfddfc3c-91ae-c144-f1c7-0964f0860ff6</guid>
       <link>https://www.spipm.nl/1920.html</link>
    </item>
    
    <item>
       <title><![CDATA[Loracrack - LoRaWAN session cracker]]></title>
       <description><![CDATA[Application for cracking LoRaWAN sessions if the AppKey is known but the handshake is missed.]]></description>
       <pubDate>Sat, 01 Jun 2019 00:00:00 </pubDate>
       <guid isPermaLink="false">87ecdb3c-91de-66d5-9754-a2f403fc119c</guid>
       <link>https://github.com/spipm/Loracrack</link>
    </item>
    
    <item>
       <title><![CDATA[Siemens Spectrum Power Command Injection]]></title>
       <description><![CDATA[During my time at Applied Risk I discovered a Command Injection vulnerability in Siemens Spectrum with the help of Rutger Hendriks. Siemens Spectrum is a control system for power grids.]]></description>
       <pubDate>Sat, 01 Jun 2019 00:00:00 </pubDate>
       <guid isPermaLink="false">4e3656bb-71f2-bc54-f59a-9b23d1fb590a</guid>
       <link>https://applied-risk.com/resources/ar-2019-010</link>
    </item>
    
    <item>
       <title><![CDATA[OSCP - Fun and challenging but overrated]]></title>
       <description><![CDATA[An article about my experiences with the OSCP course.]]></description>
       <pubDate>Sat, 01 Jun 2019 00:00:00 </pubDate>
       <guid isPermaLink="false">c1c24171-7af2-bd9b-7687-9b947ab165cf</guid>
       <link>https://www.spipm.nl/1940.html</link>
    </item>
    
    <item>
       <title><![CDATA[Simple libHackRF API example]]></title>
       <description><![CDATA[Example program for interfacing with the HackRF.]]></description>
       <pubDate>Wed, 01 May 2019 00:00:00 </pubDate>
       <guid isPermaLink="false">882635e2-3561-5210-1284-3870aca0658b</guid>
       <link>https://gist.github.com/spipm/a8c0b472392da212bf03b08f372a8f7d</link>
    </item>
    
    <item>
       <title><![CDATA[Only log required data for WPA cracking (aircrack-ng / airodump)]]></title>
       <description><![CDATA[Patch for airodump for only logging relevant data for WPA cracking.]]></description>
       <pubDate>Wed, 01 May 2019 00:00:00 </pubDate>
       <guid isPermaLink="false">a8c3fc7d-fb1e-7b10-064f-e979ef2d3a24</guid>
       <link>https://github.com/spipm/aircrack-ng/commit/ad349b9fcfa4bdcff864434b92d3c72881e3eabe</link>
    </item>
    
    <item>
       <title><![CDATA[To set currents in motion]]></title>
       <description><![CDATA[Some blog article I wanted to write on information security.]]></description>
       <pubDate>Thu, 01 Nov 2018 00:00:00 </pubDate>
       <guid isPermaLink="false">c219fc3b-5aa0-c752-a1dc-eb46d25230e4</guid>
       <link>https://www.spipm.nl/1850.html</link>
    </item>
    
    <item>
       <title><![CDATA[Programming the Razer Tartarus Chroma on Linux]]></title>
       <description><![CDATA[Program for using the Razer Tartarus Chroma on Linux because the normal drivers weren't working.]]></description>
       <pubDate>Mon, 01 Oct 2018 00:00:00 </pubDate>
       <guid isPermaLink="false">da46979d-ce47-ce14-9080-c248a93c41ce</guid>
       <link>https://github.com/spipm/Razer-USB-tartarus</link>
    </item>
    
    <item>
       <title><![CDATA[Staying Positive About False Negatives]]></title>
       <description><![CDATA[How and why I failed a couple of times during a code review / pentest.]]></description>
       <pubDate>Sat, 01 Sep 2018 00:00:00 </pubDate>
       <guid isPermaLink="false">20775916-b8dc-06b8-b916-348a3beb07b0</guid>
       <link>https://securify.nl/blog/SFY20180901/staying-positive-about-false-negatives.html</link>
    </item>
    
    <item>
       <title><![CDATA[Secure Diffie-Hellman parameters for Lighttpd with SNI]]></title>
       <description><![CDATA[A proper SNI configuration for lighttpd DH parameters.]]></description>
       <pubDate>Wed, 01 Aug 2018 00:00:00 </pubDate>
       <guid isPermaLink="false">69177c16-4f85-4181-a809-cc752223e6a1</guid>
       <link>https://www.spipm.nl/1830.html</link>
    </item>
    
    <item>
       <title><![CDATA[Self-replicating binary infecting Mach-O files]]></title>
       <description><![CDATA[Programming exercise for virus-making for getting to know assembly, Mach-O binaries and how virusses work.]]></description>
       <pubDate>Sun, 01 Jul 2018 00:00:00 </pubDate>
       <guid isPermaLink="false">707ded25-1b3c-5661-135b-911a4f89f4d6</guid>
       <link>https://github.com/spipm/simpvir</link>
    </item>
    
    <item>
       <title><![CDATA[Fixing this "couldn't get 'max filedescriptors'" error]]></title>
       <description><![CDATA[How I fixed the "couldn't get 'max filedescriptors'" error from Lighttpd.]]></description>
       <pubDate>Sun, 01 Apr 2018 00:00:00 </pubDate>
       <guid isPermaLink="false">8bc1da53-535b-1797-263d-2bfd2e728391</guid>
       <link>https://www.spipm.nl/1815.html</link>
    </item>
    
    <item>
       <title><![CDATA[Postfix mail bot for helping setting up PGP encrypted mail]]></title>
       <description><![CDATA[Programming exercise for encrypting email. This is a mailbot in Python for Postfix for setting up PGP encrypted mail.]]></description>
       <pubDate>Sun, 01 Apr 2018 00:00:00 </pubDate>
       <guid isPermaLink="false">d17bb031-661a-a3f0-7027-db8269a9de7c</guid>
       <link>https://github.com/spipm/PGPMailbot</link>
    </item>
    
    <item>
       <title><![CDATA[Spot The Bug challenge 2018 warm-up]]></title>
       <description><![CDATA[Warm-up for the Spot The Bug challenge 2018 from Securify.]]></description>
       <pubDate>Mon, 01 Jan 2018 00:00:00 </pubDate>
       <guid isPermaLink="false">e7c318cc-e49a-cb4e-f102-cfd2633eae7a</guid>
       <link>https://www.securify.nl/blog/spot-the-bug-challenge-2018-warm-up</link>
    </item>
    
    <item>
       <title><![CDATA[Hoe begin je 2018 veilig op internet?]]></title>
       <description><![CDATA[After reporting some vulnerabilities I found during SumOfPwn to a newspaper, they ask me to give some general internet safety tips for 2017-2018. The article contains a few of my practical tips. Here is the complete (Dutch) text I sent in regarding internet safety for the public.]]></description>
       <pubDate>Fri, 01 Dec 2017 00:00:00 </pubDate>
       <guid isPermaLink="false">bb7a1e94-6af0-f50b-966e-d412480ca176</guid>
       <link>https://www.spipm.nl/1780.html</link>
    </item>
    
    <item>
       <title><![CDATA[Compiling a Monero miner on OSX]]></title>
       <description><![CDATA[Tutorial on compiling a Monero miner op OSX.]]></description>
       <pubDate>Fri, 01 Dec 2017 00:00:00 </pubDate>
       <guid isPermaLink="false">529f5417-5aca-9362-b634-4a4b4b52acab</guid>
       <link>https://www.spipm.nl/1770.html</link>
    </item>
    
    <item>
       <title><![CDATA[A journey into cracking RSA moduli with a common GCD]]></title>
       <description><![CDATA[In this article I share some experiences from cracking RSA moduli in bulk by exploiting the use of common GCDs.]]></description>
       <pubDate>Wed, 01 Nov 2017 00:00:00 </pubDate>
       <guid isPermaLink="false">0477165c-e694-30a3-36b9-4731639cda27</guid>
       <link>https://www.spipm.nl/1753.html</link>
    </item>
    
    <item>
       <title><![CDATA[Fixing the 'critical software update' OSX install message]]></title>
       <description><![CDATA[A short article about fixing the 'critical software update' error message when re-installing a Macbook Pro with a touch bar.]]></description>
       <pubDate>Wed, 01 Nov 2017 00:00:00 </pubDate>
       <guid isPermaLink="false">1ea34e1e-0f17-5f2f-47bc-12b448d1a241</guid>
       <link>https://www.spipm.nl/1755.html</link>
    </item>
    
    <item>
       <title><![CDATA[Multiple vulnerabilities in VTech DigiGo allow browser overlay attack]]></title>
       <description><![CDATA[Advisory for vulnerability that allows attackers to perform a persistent overlay attack on the browser app.]]></description>
       <pubDate>Fri, 01 Sep 2017 00:00:00 </pubDate>
       <guid isPermaLink="false">1f3124f4-5025-d5f8-bfe8-671d4c5c9de4</guid>
       <link>https://www.securify.nl/advisory/multiple-vulnerabilities-in-vtech-digigo-allow-browser-overlay-attack</link>
    </item>
    
    <item>
       <title><![CDATA[Kobo Aura H2O hacking]]></title>
       <description><![CDATA[Bypassing registration for the Kobo Aura H2O so you can use it like the actual product you payed for.]]></description>
       <pubDate>Fri, 01 Sep 2017 00:00:00 </pubDate>
       <guid isPermaLink="false">ecf1b7fb-7213-9258-015d-fb01b1cc8b2b</guid>
       <link>https://www.spipm.nl/1748.html</link>
    </item>
    
    <item>
       <title><![CDATA[Broken TLS certificate validation in VTech DigiGo browser]]></title>
       <description><![CDATA[Advisory for broken TLS certificate validation in the VTech DigiGo browser.]]></description>
       <pubDate>Fri, 01 Sep 2017 00:00:00 </pubDate>
       <guid isPermaLink="false">1b69b20a-5afe-53f0-6051-041cd2081873</guid>
       <link>https://www.securify.nl/advisory/broken-tls-certificate-validation-in-vtech-digigo-browser</link>
    </item>
    
    <item>
       <title><![CDATA[Broken TLS certificate pinning in VTech DigiGo Kid Connect app]]></title>
       <description><![CDATA[Advisory for broken TLS certificate pinning in VTech DigiGo Kid Connect app that allows for a Man-in-the-Middle attack on the chat functionality.]]></description>
       <pubDate>Fri, 01 Sep 2017 00:00:00 </pubDate>
       <guid isPermaLink="false">5ce2131e-3c1e-b920-25a0-5fb3d81c1f7e</guid>
       <link>https://www.securify.nl/advisory/broken-tls-certificate-pinning-in-vtech-digigo-kid-connect-app</link>
    </item>
    
    <item>
       <title><![CDATA[Buffer over-read vulnerability in Virtuozzo Power Panel (VZPP) and Automator]]></title>
       <description><![CDATA[Advisory for buffer over-read vulnerability in Virtuozzo Power Panel (VZPP) and Automator.]]></description>
       <pubDate>Sat, 01 Jul 2017 00:00:00 </pubDate>
       <guid isPermaLink="false">5dceec4f-1ae6-fb93-daac-64ee8587a87e</guid>
       <link>https://www.securify.nl/advisory/buffer-over-read-vulnerability-in-virtuozzo-power-panel-vzpp-and-automator</link>
    </item>
    
    <item>
       <title><![CDATA[Instant negative hash cracking wordlist lookup]]></title>
       <description><![CDATA[Bloomhash - Instant negative hash cracking wordlist lookup]]></description>
       <pubDate>Sat, 01 Jul 2017 00:00:00 </pubDate>
       <guid isPermaLink="false">432f7f1b-c346-154a-9944-ef602d2b7f76</guid>
       <link>https://github.com/spipm/Bloomhash</link>
    </item>
    
    <item>
       <title><![CDATA[Crackcoin: basic blockchain-free cryptocurrency PoC in Python]]></title>
       <description><![CDATA[Crackcoin is a very basic blockchain-free cryptocurrency PoC in Python. It's a programming practice project for discovering cryptocurrencies.]]></description>
       <pubDate>Sat, 01 Jul 2017 00:00:00 </pubDate>
       <guid isPermaLink="false">a2c67009-92b1-978f-43c5-d3a707ad5a53</guid>
       <link>https://github.com/spipm/crackcoin</link>
    </item>
    
    <item>
       <title><![CDATA[LazyFact - Factoring RSA moduli using basic methods]]></title>
       <description><![CDATA[Programming practice to factorise an RSA modulus using very basic methods.]]></description>
       <pubDate>Sat, 01 Jul 2017 00:00:00 </pubDate>
       <guid isPermaLink="false">ae10d119-6a79-ca26-5fc0-64199d17b83d</guid>
       <link>https://github.com/spipm/LazyfactPython</link>
    </item>
    
    <item>
       <title><![CDATA[Reflected Cross-Site Scripting in CM4ALL]]></title>
       <description><![CDATA[Advisory for Reflected Cross-Site Scripting in CM4ALL.]]></description>
       <pubDate>Sat, 01 Jul 2017 00:00:00 </pubDate>
       <guid isPermaLink="false">0a739e40-7fe6-f437-f111-c9513073242f</guid>
       <link>https://www.spipm.nl/1740.html</link>
    </item>
    
    <item>
       <title><![CDATA[Spot The Bug challenge 2016 write-up]]></title>
       <description><![CDATA[Write-up for the Spot The Bug challenge 2016 from Securify.]]></description>
       <pubDate>Sun, 01 Jan 2017 00:00:00 </pubDate>
       <guid isPermaLink="false">b10b9f2c-152d-6bf6-e6f0-77fce48456fa</guid>
       <link>https://www.securify.nl/blog/SFY20170103/spot-the-bug-challenge-2016-write-up.html</link>
    </item>
    
    <item>
       <title><![CDATA[Spot The Bug challenge December 2016]]></title>
       <description><![CDATA[Briefing for the Spot The Bug challenge 2016 from Securify.]]></description>
       <pubDate>Tue, 01 Nov 2016 00:00:00 </pubDate>
       <guid isPermaLink="false">74e66d0c-bbea-a059-4e2e-a94434a6f9ec</guid>
       <link>https://www.securify.nl/blog/SFY20161113/spot-the-bug-challenge-december-2016_-win-the-bitcoin_.html</link>
    </item>
    
    <item>
       <title><![CDATA[Threaded client/server sockets in Python]]></title>
       <description><![CDATA[Programming practice for threaded server/client TCP sockets.]]></description>
       <pubDate>Sat, 01 Oct 2016 00:00:00 </pubDate>
       <guid isPermaLink="false">d59dd38f-a329-9193-a9d0-5344ff320d92</guid>
       <link>https://github.com/spipm/pythonNetworking</link>
    </item>
    
    <item>
       <title><![CDATA[Cross-Site Request Forgery in WordPress Press This function allows DoS]]></title>
       <description><![CDATA[Advisory for DoS via Cross-Site Request Forgery in WordPress Press This function.]]></description>
       <pubDate>Fri, 01 Jul 2016 00:00:00 </pubDate>
       <guid isPermaLink="false">f29b0600-3368-78b3-8406-fa75c2f6e3b9</guid>
       <link>https://www.securify.nl/advisory/cross-site-request-forgery-in-wordpress-press-this-function-allows-dos/</link>
    </item>
    
    <item>
       <title><![CDATA[Weak validation of Amazon SNS push messages in W3 Total Cache WordPress Plugin]]></title>
       <description><![CDATA[Advisory for Weak validation of Amazon SNS push messages in W3 Total Cache (Wordpress plugin).]]></description>
       <pubDate>Fri, 01 Jul 2016 00:00:00 </pubDate>
       <guid isPermaLink="false">1237877d-7e6f-2cf9-a5c9-22a4b2c11472</guid>
       <link>https://www.securify.nl/en/advisory/weak-validation-of-amazon-sns-push-messages-in-w3-total-cache-wordpress-plugin/</link>
    </item>
    
    <item>
       <title><![CDATA[Command injection in InfiniteWP Admin Panel]]></title>
       <description><![CDATA[Advisory for Command injection in InfiniteWP Admin Panel (Wordpress plugin).]]></description>
       <pubDate>Fri, 01 Jul 2016 00:00:00 </pubDate>
       <guid isPermaLink="false">9e1ae281-9587-2719-2cdc-6efdf7d8ec52</guid>
       <link>https://www.securify.nl/en/advisory/command-injection-in-infinitewp-admin-panel/</link>
    </item>
    
    <item>
       <title><![CDATA[Multiple vulnerabilities in All In One WP Security & Firewall plugin]]></title>
       <description><![CDATA[Advisory for Multiple vulnerabilities in All In One WP Security & Firewall plugin login CAPTCHA (Wordpress plugin).]]></description>
       <pubDate>Fri, 01 Jul 2016 00:00:00 </pubDate>
       <guid isPermaLink="false">9d52bae7-905a-f475-c7f4-7b815594d679</guid>
       <link>https://www.securify.nl/en/advisory/multiple-vulnerabilities-in-all-in-one-wp-security-firewall-plugin-login-captcha/</link>
    </item>
    
    <item>
       <title><![CDATA[Authorization bypass in InfiniteWP Admin Panel]]></title>
       <description><![CDATA[Advisory for authorization bypass in InfiniteWP Admin Panel (Wordpress plugin).]]></description>
       <pubDate>Fri, 01 Jul 2016 00:00:00 </pubDate>
       <guid isPermaLink="false">955384e2-ff79-7c83-a5b2-a09014982841</guid>
       <link>https://www.securify.nl/en/advisory/authorization-bypass-in-infinitewp-admin-panel/</link>
    </item>
    
    <item>
       <title><![CDATA[Persistent Cross-Site Scripting in WP Google Maps Plugin via CSRF]]></title>
       <description><![CDATA[Advisory for Persistent Cross-Site Scripting in WP Google Maps Plugin via CSRF (Wordpress plugin).]]></description>
       <pubDate>Fri, 01 Jul 2016 00:00:00 </pubDate>
       <guid isPermaLink="false">5ecd9c29-76dd-42f0-ff9a-d23aeb3c054e</guid>
       <link>https://www.securify.nl/en/advisory/persistent-cross-site-scripting-in-wp-google-maps-plugin-via-csrf/</link>
    </item>
    
    <item>
       <title><![CDATA[Reflected Cross-Site Scripting vulnerability in W3 Total Cache plugin]]></title>
       <description><![CDATA[Advisory for Reflected Cross-Site Scripting vulnerability in W3 Total Cache plugin (Wordpress plugin).]]></description>
       <pubDate>Fri, 01 Jul 2016 00:00:00 </pubDate>
       <guid isPermaLink="false">437a68c7-af4e-74b1-b2a4-3bad0d25fc0e</guid>
       <link>https://www.securify.nl/en/advisory/reflected-cross-site-scripting-vulnerability-in-w3-total-cache-plugin/</link>
    </item>
    
    <item>
       <title><![CDATA[Persistent Cross-Site Scripting in Woocommerce WordPress plugin]]></title>
       <description><![CDATA[Advisory for Persistent Cross-Site Scripting in Woocommerce WordPress plugin (Wordpress plugin).]]></description>
       <pubDate>Fri, 01 Jul 2016 00:00:00 </pubDate>
       <guid isPermaLink="false">78ccb71d-6834-0307-aa85-bbdbc61cfa8a</guid>
       <link>https://www.securify.nl/en/advisory/persistent-cross-site-scripting-in-woocommerce-wordpress-plugin/</link>
    </item>
    
    <item>
       <title><![CDATA[Reflected Cross-Site Scripting vulnerability in MailPoet Newsletters plugin]]></title>
       <description><![CDATA[Advisory for Reflected Cross-Site Scripting vulnerability in MailPoet Newsletters plugin (Wordpress plugin).]]></description>
       <pubDate>Fri, 01 Jul 2016 00:00:00 </pubDate>
       <guid isPermaLink="false">a8ba6a4c-89f1-c72c-5179-73c0e9e91bad</guid>
       <link>https://www.securify.nl/advisory/reflected-cross-site-scripting-vulnerability-in-mailpoet-newsletters-plugin/</link>
    </item>
    
    <item>
       <title><![CDATA[Information disclosure race condition in W3 Total Cache WordPress Plugin]]></title>
       <description><![CDATA[Advisory for Information disclosure race condition in W3 Total Cache (Wordpress plugin).]]></description>
       <pubDate>Fri, 01 Jul 2016 00:00:00 </pubDate>
       <guid isPermaLink="false">e2cdb30c-ee65-60c4-98ac-85480419936f</guid>
       <link>https://www.securify.nl/advisory/information-disclosure-race-condition-in-w3-total-cache-wordpress-plugin/</link>
    </item>
    
    <item>
       <title><![CDATA[Persistent Cross-Site Scripting in Instagram Feed plugin via CSRF]]></title>
       <description><![CDATA[Advisory for Persistent Cross-Site Scripting in Instagram Feed plugin via CSRF (Wordpress plugin).]]></description>
       <pubDate>Fri, 01 Jul 2016 00:00:00 </pubDate>
       <guid isPermaLink="false">4c1e3c39-1b38-ac6b-deb7-e54df8adcd5b</guid>
       <link>https://www.securify.nl/en/advisory/persistent-cross-site-scripting-in-instagram-feed-plugin-via-csrf/</link>
    </item>
    
    <item>
       <title><![CDATA[Stored Cross-Site Scripting in Gallery - Image Gallery WordPress Plugin]]></title>
       <description><![CDATA[Advisory for Stored Cross-Site Scripting in Gallery - Image Gallery (Wordpress plugin).]]></description>
       <pubDate>Fri, 01 Jul 2016 00:00:00 </pubDate>
       <guid isPermaLink="false">1ad4e3da-8e5b-463d-ab2e-f4ab4617252f</guid>
       <link>https://www.securify.nl/en/advisory/stored-cross-site-scripting-in-gallery-image-gallery-wordpress-plugin/</link>
    </item>
    
    <item>
       <title><![CDATA[ASCII animations in terminal using curses]]></title>
       <description><![CDATA[Script for showing ascii animations in the terminal using the Python curses library.]]></description>
       <pubDate>Mon, 01 Feb 2016 00:00:00 </pubDate>
       <guid isPermaLink="false">26d81df3-374c-9e1d-80f1-803a2716193f</guid>
       <link>https://github.com/spipm/cursesAsciiAnimations</link>
    </item>
    
    <item>
       <title><![CDATA[JavaScript animation using the canvas element]]></title>
       <description><![CDATA[Programming exercise for using the canvas element from Javascript.]]></description>
       <pubDate>Mon, 01 Feb 2016 00:00:00 </pubDate>
       <guid isPermaLink="false">ec24b0a6-24c3-b795-a472-eedd27334885</guid>
       <link>https://github.com/spipm/Blobspace</link>
    </item>
    
    <item>
       <title><![CDATA[Shortest Python quine]]></title>
       <description><![CDATA[A Python quine I created in 2015 has been doing well on Stackoverflow.]]></description>
       <pubDate>Wed, 01 Jul 2015 00:00:00 </pubDate>
       <guid isPermaLink="false">a1e879a0-16d1-53b7-ff84-488eeb70178e</guid>
       <link>https://stackoverflow.com/questions/6223285/shortest-python-quine/31724322#31724322</link>
    </item>
    
    <item>
       <title><![CDATA[Spot The Bug challenge 2015 write-up]]></title>
       <description><![CDATA[Write-up for the Spot The Bug challenge 2015 from Securify.]]></description>
       <pubDate>Mon, 01 Jun 2015 00:00:00 </pubDate>
       <guid isPermaLink="false">ce8a6a30-aafd-a65b-a04e-3737b3efc50e</guid>
       <link>https://www.securify.nl/blog/SFY20150601/spot-the-bug-challenge-2015-write-up.html</link>
    </item>
    
    <item>
       <title><![CDATA[Spot The Bug challenge 2015 briefing]]></title>
       <description><![CDATA[Briefing for the Spot The Bug challenge 2015 from Securify.]]></description>
       <pubDate>Sun, 01 Mar 2015 00:00:00 </pubDate>
       <guid isPermaLink="false">80750cd2-aac6-0045-22ea-5b24473fd6f8</guid>
       <link>https://www.securify.nl/blog/SFY20150501/spot-the-bug-challenge-2015-briefing.html</link>
    </item>
    
    <item>
       <title><![CDATA[Glype proxy local address filter bypass]]></title>
       <description><![CDATA[Advisory for bypassing local address filters in the Glype web-based proxy that allows attacking the internal network of the proxy host.]]></description>
       <pubDate>Mon, 01 Sep 2014 00:00:00 </pubDate>
       <guid isPermaLink="false">f6c11e9f-5c0f-0143-b2d4-2144cd5ef384</guid>
       <link>https://www.securify.nl/advisory/glype-proxy-local-address-filter-bypass</link>
    </item>
    
    <item>
       <title><![CDATA[Glype proxy cookie jar path traversal allows code execution]]></title>
       <description><![CDATA[Advisory for path traversal vulnerability in the Glype web-based proxy that allows an attacker to run arbitrary PHP code on the server or remove critical files from the filesystem.]]></description>
       <pubDate>Mon, 01 Sep 2014 00:00:00 </pubDate>
       <guid isPermaLink="false">efa32a30-3da8-77a4-5b82-d43b0fd8f345</guid>
       <link>https://www.securify.nl/advisory/glype-proxy-cookie-jar-path-traversal-allows-code-execution</link>
    </item>
    
    <item>
       <title><![CDATA[Trainpooling]]></title>
       <description><![CDATA[Back in 2014 I thought of a hack for the Dutch train system I call trainpooling.]]></description>
       <pubDate>Thu, 01 May 2014 00:00:00 </pubDate>
       <guid isPermaLink="false">aed02a51-f030-fb50-deda-2afb65647485</guid>
       <link>https://www.spipm.nl/1401.html</link>
    </item>
    
    <item>
       <title><![CDATA[Hackerone DoS by GIF resize flooding]]></title>
       <description><![CDATA[Advisory for Denial of Service vulnerability in HackerOne via GIF image upload.]]></description>
       <pubDate>Fri, 01 Nov 2013 00:00:00 </pubDate>
       <guid isPermaLink="false">98a710a4-f0a5-b2e2-e558-22f23556327a</guid>
       <link>https://hackerone.com/reports/400</link>
    </item>
    
    <item>
       <title><![CDATA[HackerOne DoS by JPG pixel flood]]></title>
       <description><![CDATA[Advisory for Denial of Service vulnerability in HackerOne via JPG image upload.]]></description>
       <pubDate>Fri, 01 Nov 2013 00:00:00 </pubDate>
       <guid isPermaLink="false">2a020fec-fb19-42b5-d052-644d4b21cfc3</guid>
       <link>https://hackerone.com/reports/390</link>
    </item>
    
    <item>
       <title><![CDATA[Hackerone DoS by PNG compression]]></title>
       <description><![CDATA[Advisory for Denial of Service vulnerability in HackerOne via PNG image upload.]]></description>
       <pubDate>Fri, 01 Nov 2013 00:00:00 </pubDate>
       <guid isPermaLink="false">e0f4511c-6b88-05b8-853a-2a82b79aa004</guid>
       <link>https://hackerone.com/reports/454</link>
    </item>
    
    <item>
       <title><![CDATA[Python library for creating PNG image data]]></title>
       <description><![CDATA[Python script for generating custom PNG chunks for testing decoders.]]></description>
       <pubDate>Fri, 01 Nov 2013 00:00:00 </pubDate>
       <guid isPermaLink="false">b58f6ed2-bd04-da65-b6a6-b24e76e7f96d</guid>
       <link>https://github.com/spipm/CreatePNG</link>
    </item>
    
    <item>
       <title><![CDATA[Helpdesk - Stupid things people say]]></title>
       <description><![CDATA[A long time ago I worked at a helpdesk. While working there I started documenting stupid things people said over the phone (in Dutch). It was hilarious.]]></description>
       <pubDate>Wed, 01 Sep 2010 00:00:00 </pubDate>
       <guid isPermaLink="false">3bb1cb5d-d692-e6d7-83be-6dc0a0e3ff7c</guid>
       <link>files/HelpdeskCommunicatieRelease.pdf</link>
    </item>
    
  </channel>
</rss>