https://ja.meswoolley.co.uk/Network security, programming, crypto and other things that interest me 2026-03-28T10:41:18+00:00 James Woolley https://ja.meswoolley.co.uk/ Jekyll © 2026 James Woolley /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2026-03-28T07:07:33+00:00 2026-03-28T07:07:33+00:00 https://ja.meswoolley.co.uk/tplinklua/ James

I’ve been doing some research into a Tplink Archer C60 V3 router recently. One of the first steps i take when looking at IOT devices is to get a copy of the firmware. One method is to dump the flash chip and recover it from that. The easier option, which is the case with the TPLink Archer C60 V3, is to just download the firmware from the internet. Many manufactures offer the firmware to downloa...

2025-06-28T08:17:24+01:00 2025-06-28T08:17:24+01:00 https://ja.meswoolley.co.uk/vnc-honeypot/ Xtrato

The Setup I decided to setup a VNC honeypot. My goal was to essentially spin up an Ubuntu server and configure it in such a way, where when someone connected, it would start a recording of the active VNC session, and once disconnected, would save that recording into a file which i could retrieve at a later date. The overall setup was relatively simple. I started with a fresh Ubuntu installatio...

2023-09-01T00:00:00+01:00 2023-09-01T00:00:00+01:00 https://ja.meswoolley.co.uk/hackthebox-sau/ Xtrato

As with all other machines, I started by running an NMap scan against the target: Starting Nmap 7.94 ( https://nmap.org ) at 2023-08-04 13:54 BST Stats: 0:00:47 elapsed; 0 hosts completed (1 up), 1 undergoing Service Scan Service scan Timing: About 50.00% done; ETC: 13:55 (0:00:31 remaining) Nmap scan report for 10.10.11.224 Host is up (0.21s latency). Not shown: 65531 closed tcp ports (reset)...

2023-07-27T00:00:00+01:00 2023-07-27T00:00:00+01:00 https://ja.meswoolley.co.uk/persistence-using-dll-hijacking/ Xtrato

Once privileged access has been achieved on a target machine the next step tends to be maintaining persistence. If the target is restarted or a new user logs in, you want to maintain access to the target. Once method of doing this is by using DLL hijacking. DLL hijacking is essentially where you replace a required DLL with a malicious one. So when an application calls for a specific DLL it ins...

2023-07-17T00:00:00+01:00 2023-07-17T00:00:00+01:00 https://ja.meswoolley.co.uk/openvpn-access-notifications/ Xtrato

Ive recently setup an OpenVPN server on my home network to allow me to connect remotely. I’ve always been quite hesitant to open up any ports on my home firewall as I know it can lead to trouble if done incorrectly. I have setup OpenVPN Access server, and checked all the configurations to ensure that it is setup securely, all users have strong passwords and MFA is being used to allow access. I...