A record of
things learned.
Security research, course notes, code, and the occasional deep dive. Welcome to Tomahawkd's Logger.
我如何搭建半自动的多 Agent 开发流水线
从 BMAD 方法的三个问题出发，记录基于支持自定义角色与会话派发的 agent 工具构建多角色开发流水线的设计：三阶段流程、两层会话拓扑、纠正预算、联合准入审查，以及作为唯一确定性事实来源的内部审计工具。
浅析某箭的反作弊机制
从游戏目录与 IL2CPP 程序结构入手，记录对某箭所用 Anti-Cheat Toolkit 的分析，重点讨论时间差调速检测、注入检测及其实现局限。
学习某订阅付费程序过程
记录对 WeMod 这一 Electron 应用的逆向研究过程，梳理客户端订阅逻辑、调试入口与 ASAR 完整性校验之间的关系，以及分析中遇到的问题。
Computer Forensics and Cybercrime
Course notes on cybercrime and malware economics, investigative and legal frameworks, digital evidence, memory and network forensics, anti-forensics, and incident management.
Cryptography
Cryptography notes covering security properties, classical and modern encryption, block cipher modes, RSA, Diffie-Hellman, hashes, authentication protocols, and zero-knowledge proofs.
Distribute Ledger and Cryptocurrencies
Distributed ledger notes covering Bitcoin transactions and mining, consensus protocols, cryptocurrency economics, token offerings, ledger platforms, smart contracts, and scaling.
Network Security
Network security notes covering protocol attacks, firewalls, intrusion detection, honeypots, IPsec and TLS, anonymity, and wireless and IoT security.
Security Engineering
Security engineering notes on memory corruption, format-string vulnerabilities, shellcode, mitigations, static analysis, symbolic execution, and access control.
Security Management
Security management notes on asset and risk assessment, treatment and monitoring, organisational policies, compliance, security economics, business continuity, and disaster recovery.
Security Testing
Security testing notes covering web vulnerabilities, network reconnaissance, assessment reporting, social engineering, password attacks, exploitation, and adversarial machine learning.
Software Measurement and Testing
Software testing notes on verification and validation, dependability, control and data flow, functional and structural coverage, mutation testing, and unit, regression, and system testing.
c-tools
Storage of useful tools
Censys-java
Censys programming api implementation in java
Course Script
Using for courses in SDU
crypto-framework
Crypto framework inspired by OpenSSL EVP
DRBG
Deterministic Random Bit Generator (NIST SP800-90A rev.1 implementation)
GsonHelper
Helper class for Gson making it easier to use
JavaTools
Storage of useful tools
JLightConfig
A Lightweight zero configuration configuration framework
JustMail
Fork from LukWebsForge for emulating mail server
Netfilter-Firewall
Netfilter based firewall
OpenSSL-stuff
openssl programming usage in crypto & network
PKI-QRAuth
PKI based QR Authentication Framework
Repositories
A collection of personal repositories covering cryptography, authentication, networking, Java libraries, and development utilities.
speedtest-framework
Individual speed test framework especially for ciphers
Subdomain-detect
Subdomain detection using puppeteer
TLS-Tester
Explore this project and its documentation.
tomahawk.github.io
This site
OpenSSL C/S Implementation Demo
使用 OpenSSL 实现客户端与服务端通信的 C 语言示例，涵盖 TLS 上下文初始化、证书配置、连接握手、数据收发与错误处理。
OpenSSL X509 Parse Demo
使用 OpenSSL 解析 PEM 格式 X.509 证书的 C 语言示例，展示证书版本、序列号、签名算法、颁发者、有效期、主体、公钥与扩展信息的读取方式。
SSL/TLS Previous Vulnerabilities
Notes on POODLE, BEAST, CRIME, BREACH, and Heartbleed, outlining the affected SSL/TLS mechanisms and the role of padding, compression, and implementation flaws.
No matching files. Try a different title or keyword.