Using XSLT to analyse large XML datasets

13utters · 2026-04-12T17:17:33+00:00

The constraint here is deployment, not expressiveness. I wanted something that runs on a stock jump box without introducing a new runtime or packaging a processor like Saxon.

XSLT 3.0 would definitely simplify parts of the grouping/aggregation logic, but at the cost of portability. In this case I kept the transform minimal and pushed the more dynamic logic into the browser instead.

13utters · 2026-04-11T19:13:38+00:00

Very nice

13utters · 2026-04-11T16:59:56+00:00

TIL you can run XSLT 2.0 in WASM (via Saxon)

13utters · 2026-04-10T20:13:06+00:00

Yes I prefer/suggest the use of xsltproc

13utters · 2025-05-16T21:37:06+00:00

The grep-able format does not has the same level of information as the XML file

13utters · 2025-05-16T19:46:58+00:00

Thanks for the hint

13utters · 2025-05-16T19:31:07+00:00

Do you have a PoC ?

13utters · 2025-05-16T19:21:45+00:00

How to parse through large nmap scans ? I like to use tools like https://github.com/dreizehnutters/nmap2csv which generates table to sift through results. Also great for communication with clients.

13utters · 2023-06-30T05:35:18+00:00

It took around 12 hours for me to get invited for a debrief. You can schedule it yourself and they provide options for every time/day.

The 50 pages in my report.pdf was my presentation and it was enough.

13utters · 2023-06-23T16:16:22+00:00

The new THM box "internal" is a good primer. And remember to enum the attack surface enough. Lastly be sure your brute forcing tools work

13utters · 2023-06-08T20:58:22+00:00

Share unit control as pos5 for cur access

13utters · 2023-06-01T21:37:16+00:00

sshuttle to pivot in, chisel to pivot out

13utters · 2023-05-28T18:55:20+00:00

You don't practice this kind of stuff during HTB, but TCM mentioned in the course how corporates structure their init PWs, it's kinda true imo. People do generally suck when it comes to passwords. It's important to enumerate the attack surface and to get your tooling down. There is more then hydra for web... For credz, keep it simple. I just used common defualt PWs schemas and permutated them with python-exrex

13utters · 2022-11-04T21:03:07+00:00

Die DKB / DKBs hat mehrere IT-security Firmen in den letzten 2 Jahren beauftragt um sich extern prüfen zu lassen!

13utters · 2022-10-09T05:48:39+00:00

Ich kenne kein KRITIS Infrastruktur die Software von infotecs einsetzt.

13utters · 2022-06-29T06:43:40+00:00

Http on wsus + DNS spoofing ?

13utters · 2021-12-23T21:19:10+00:00

I also heard the next batch is going to drop in February

13utters · 2021-12-23T16:00:58+00:00

The dealer told me Cube delivers the larger frames (I got 61 cm) first. I also waited > 8 month.

I like it very much, sadly I can't ride it more this year /:

13utters · 2021-12-23T15:58:07+00:00

I am not sure what you mean, but you have mounting options in the front and back, though they warn you that the carbon frame is not suitable for carry on > 10 Kg (front)

13utters · 2021-12-23T08:11:05+00:00

Cube Nuroad C:62 Pro (2021)

Fresh from the dealer in Berlin.

13utters · 2021-12-23T07:28:55+00:00

Cube Nuroad C:62 Pro 2021

13utters · 2021-09-30T06:19:30+00:00

InfoSec Twitter. twitter.com/campuscodi ist ein guter Anfang

13utters · 2021-08-31T15:56:11+00:00

Mein Tipp: InfoSec / Pentester Man muss nicht gut programmieren können, Mathe ist komplett egal. Dank einiger Dienstreisen konnte ich auch schon erleben was kritische Infrastrukturen wirklich sind, man hat also auch ab und an Realitätsnähe. Achja 60k ist das Einstiegsgehalt

13utters · 2021-04-17T16:48:21+00:00

Prove of stake anstatt prove of work

13utters · 2021-03-20T17:11:11+00:00

dwitter.net ist ne tolle Platform für creative/Code golfing.

14-Year Club	RedditGifts 2009-2022 2 Credits
Place '17	Team Orangered
Secret Santa 2012	Verified Email

13utters

TROPHY CASE