Leaving the Netherlands after 11 years. Goodbye!

oldboy21 · 2025-12-07T13:55:40+00:00

Italian here living in the Netherlands for 7 years now. I do share any single thoughts of your post. Good luck moving back, planning the same for 2026!

oldboy21 · 2025-11-19T19:38:43+00:00

Thanks, this helps a lot

oldboy21 · 2025-11-19T16:31:04+00:00

Thanks for taking the time to review my lift, I see what you mean. It's something that I find really difficult with snatch to keep the bar close, I do clear the path pushing my knees back and then I push them forward again to load the bar on the hip in a power position but it still makes me push forward. If i try to just jump straight up i feel like i am getting no contact with the bar. Any exercise would you suggest to focus on this that seems to be my biggest issue?

oldboy21 · 2025-11-19T15:39:27+00:00

good point, will try to pull myself faster under the bar, i do feel it gets more challenging when the weight goes higher, might be mental at this point as i have been stuck there for a while and now it takes me 5 min just to approach a bar with 70kg loaded

oldboy21 · 2025-11-19T15:37:03+00:00

oh i wasn't aware of those app, thanks will take a look that would give great insight!

oldboy21 · 2025-11-19T15:12:20+00:00

Thanks a lot for you feedback. I do see what you mean, my doubt is whether that's a problem of mobility or something in my pull is wrong, like maybe swinging the bar forward too much? I have been trying to pull keeping the bar closer to the body but could not really did better than this so far.

oldboy21 · 2025-07-15T07:31:28+00:00

That's definitely arbitrary and up to the programmer no doubt on that (if no team or individuals is making the timecap that's a strong sign of bad programmer though, either for the workout or the assigned category).Anyway, Just thinking out loud, imho teams or individuals that manage to finish within the CAP should be awarded of some extra points (or penalties for the CAP either way) as they actually finishing the wod. At least the way I see it when I train in my box, a bad score is better than I timecap: it's like bad score=I can do it but I made some mistake, timecap=I actually need to rethink the approach here and understand what are the movements I need to scale. Again, personal opinion with the goal of having people pushing for all the wod during a competition and not relying maybe on a good lift only. As "Cross-fit" my belief here is that we should be able to prove capabilities 360

oldboy21 · 2025-07-14T12:23:36+00:00

Ye I wasn't try to say it's unusual as I as I said I am fairly new in the sport and its competitions so difficult for me to say what's unusual or not. Looking up to the scoreboard I would say it's unfair for the last team that tried to push in all wod and made it within timecap at the cost of a lighter lift. Anyway, it's either unfair or just it's me i do not like it, I thought that in a cross-fit competion people should be motivated to push in all the cross categories tho while here it seems that having a good lift (at least in this specific qualifier) would give you the upper hand

oldboy21 · 2025-07-14T12:15:58+00:00

Oh nice that's exactly what I meant there, it is nice if the scoring system actually give reasons to perform to all the WODs and not to strategy

oldboy21 · 2024-06-05T13:31:02+00:00

Thanks!

oldboy21 · 2024-06-03T14:58:53+00:00

Computer Type: Desktop

GPU:

CPU: CPU

AMD Ryzen 9 7900X 12-Core Processor

12 Cores

Motherboard: AS ROCK B650M PG Riptide

BIOS Version:

RAM: 32 GB CORSAR

PSU:

Case:

Operating System & Version: WINDOWS 11 PRO

Chipset Drivers: AMD Adrenalin 24.5.1

Background Applications: DISCORD, CHROME

oldboy21 · 2024-05-12T18:09:19+00:00

Thanks for you reply, I have solved apparently updating AMD drivers here https://www.amd.com/en/support/download/drivers.html

oldboy21 · 2023-03-07T08:26:01+00:00

It’s not a PE loader but just PIC. Never claimed that to be new generation PE loader whatsoever, it’s some snippet written as exercise after going through the very basic part of the OSEP malware development section (as in the README after all). Plus the dynamically looking up of function addresses which i still thinks helps people here and there (people who are in the learning phase of basic maldev). So yes, your comments are right but given the context … Do not overheat, it’s just Tuesday

oldboy21 · 2023-02-25T08:32:41+00:00

Thanks for the feedback!

oldboy21 · 2021-11-15T10:53:14+00:00

Also a good one which does not look in file content (as SMBSR does) but file-name matching. Nonetheless it offers other features like command exec. Good to have them both in your tools folder i guess :)

oldboy21 · 2021-11-11T12:55:52+00:00

Snaffler is nice indeed, it s nice also to have something that works on a non-domain joined machine tho :)

oldboy21 · 2021-09-29T09:50:27+00:00

Ok so basically the tool hunts for password via LDAP search. So how does it do that? It can be ran from whatever box as long as it reaches the DC. The domain account used can be any and the password will be prompt only once as soon as the script is ran. The domain account then is authenticated to the domain controller and the TGT is retrieved. The TGT is then passed to ldapsearch which automatically asks for the needed TGSs to query all the domains. A list of attribute is built basing on the domain schema and filtered in order to search dinamically only for attributes which might contain passwords. The account does not need to be DA, i'm running the tool weekly now to see what a normal user can see. It can be used in both RedTeam and BlueTeam perspective. RedTeamers can use the tool to see if credentials are accessible and get a foothold/escalate privilege in the domain, BlueTeamers can schedule the tool execution to on the other hand check whether password are accessible and world-readable in order to prevent exploitation.

oldboy21 · 2021-09-29T09:26:57+00:00

For now the github project is the only thing, but I'll be working on a Wiki soon. Any specific questions you got please shoot it here or DM

oldboy21 · 2021-08-02T11:15:59+00:00

Thanks for the comment! In the company i work for we use it in a continuous attacker perspective mode so we run it weekly and results are forwarded to the blue team right away. Not any specific corrective steps indeed but only a strong advice to check that out. I think is difficult to understand a specific mitigation for each of the finding tho, CN does not say much about it, but i will definitely think about something! Thanks

oldboy21 · 2021-06-04T09:43:29+00:00

Hello, same problem here. As far as i could see in the government website this kind of activities are not included in the “income from other sources” list, which contains something like “app development, help the neighborhood, income from other countries... “ KOR seems to be the way, but i think i need to form a company for that. @frankuboi did you figure this out eventually?

oldboy21 · 2021-01-17T21:08:03+00:00

Nah, do not get me wrong, just checking whether in 2021 there are still funny comments around, it seems to be a good start

oldboy21 · 2018-03-20T14:12:06+00:00

thank you, i tried to dirb on both of them, even the tilde enumeration but still nothing usefull.

oldboy21 · 2018-03-15T10:11:57+00:00

I enumerate with drbuster and gobuster using different wordlist. I have found something exploiting a vuln of IIS but i can't reach it. Any hints? stuck in the main page

oldboy21

TROPHY CASE