The Curious Engineer

All blogs / Security

incolumitas.com

incolumitas.com

Nikolai Tschacher's ideas around IT security and computer science

SecurityJavaScript / TypeScriptWeb development

’15’20’25
Posts
102 from 8 Oct 2012 to 17 Sep 2026
Posting
now and then (5 in the last year)
Kind
personal blog
Feed
https://incolumitas.com/feeds/all.atom.xml

2026 5

  1. Mathematicans need to grow up
  2. Let's begin this...
  3. The Rise of AI and Its Implications for Entrepreneurs
  4. Success
  5. botstop.io - Does your Browser look like a Bot?

2023 1

  1. The State of this Blog

2022 4

  1. How to find the ASN for any IP Address?
  2. db.js — In-Memory Key-Value Database with Persistent File Storage
  3. How to find out if an IP address belongs to a Hosting / Cloud Provider?
  4. Fingerprinting TLS - Core differences between TLS 1.2 and TLS 1.3

2021 20

  1. On High-Precision JavaScript Timers
  2. Is this a valid method to detect Proxies?
  3. So you want to Scrape like the Big Boys? 🚀
  4. 7 different ways to detect Proxies
  5. Where is the World headed to?
  6. On the Architecture of Bot Detection Services
  7. API to Check if an IP Address belongs to a Datacenter / Cloud Provider
  8. Detecting Proxies and VPN's with Latency Measurements
  9. Detecting Brightdata's (formerly Luminati Networks) Data Collector as a Bot
  10. Avoid Puppeteer or Playwright for Web Scraping
  11. Detecting Datacenter and Residential Proxies
  12. Behavioral Analysis for Bot Detection
  13. TCP/IP Fingerprinting for VPN and Proxy Detection
  14. Detecting scraping services
  15. 7 Common Mistakes in Professional Scraping
  16. Why does this Website know that I am sitting on the Toilet?
  17. Headful Google Chrome with Xvfb on AWS Lambda Container
  18. Browser Red Pills: Why are you browsing my website from AWS Lambda?
  19. Browser based Port Scanning with JavaScript
  20. Breaking the Google Audio reCAPTCHA with Google's own Speech to Text API

2020 12

  1. Deploy an Express App with Nginx and forward real IP Address
  2. Detecting uBlock Origin and Adblock Plus with JavaScript only
  3. Behavioral Analysis: Recording Mouse Movements and other User Interactions with JavaScript
  4. Dynamically changing proxies with puppeteer
  5. Remove YouTube Ads from your Android Phone
  6. Abusing image tags for cross domain requests
  7. Reliable Cross Domain Requests when the User leaves the Page
  8. Crawling Infrastructure - Introduction
  9. Dynamic creation of S3 buckets in many regions
  10. The value of work in the coming decades
  11. How to dynamically change http/s proxy servers in puppeteer?
  12. Using http/s and socks4/5 proxies with puppeteer and chrome with squid and danted

2019 13

  1. 5 crucial tips how to survive riding a motorbike/scooter in Thailand (2019)
  2. 4 reasons why you should NOT travel to Koh Phi Phi
  3. Model Based fuzzing of the WPA3 Dragonfly Handshake
  4. Review of the Koh Phangan Full Moon Party in Octobre 2019
  5. Battling incomplete information: Connect market demand with market supply by Google advertisement scraping and lead crawling
  6. Scraping 1 million keywords on the Google Search Engine
  7. Scraping with puppeteer and headless chrome deployed to AWS Lambda
  8. Fuzzing the WPA3 Dragonfly handshake
  9. Struktur: A completely new approach to web scraping
  10. Breaking Google's Recaptcha
  11. Running a WPA3 access point with hostapd 2.7 and SAE/Dragonfly
  12. Scraping search engines in 2019
  13. Programming to improve your life

2018 9

  1. Discontinuation of GoogleScraper
  2. Introduction to Machine Learning in 2019
  3. Tutorial: Youtube scraping with puppeteer
  4. Scraping Amazon Reviews using Headless Chrome Browser and Python3
  5. GoogleScraper Tutorial - How to scrape 1000 keywords with Google
  6. Hide related products on shop page in Woocommerce
  7. Cryptographic properties of MACs and HMACs
  8. Cryptographic Hash Functions
  9. How to find large prime numbers for RSA with the Miller-Rabin Primality Test

2016 4

  1. Privilege Escalation Techniques
  2. Probabilistic data structures to estimate cardinalities and frequencies of massive streams
  3. What other package managers are vulnerable to typo squatting attacks?
  4. Typosquatting programming language package managers

2015 8

  1. Nebula Wargame walkthrough Level 10-19
  2. Nebula Wargame walkthrough Level 0-9
  3. Solution for wargame natas19
  4. Solution for Natas11 for natas wargame on overthewire.org
  5. Cross platform Lichess Cheat
  6. A lot of work to do for GoogleScraper in the future and request for comments!
  7. Implementing two Graph traversal algorithms in Python: Depth First Search and Breadth First Search
  8. Very good program to record audio and desktop on Linux!

2014 6

  1. Scraping and Extracting Links from any major Search Engine like Google, Yandex, Baidu, Bing and Duckduckgo
  2. Using the Python cryptography module with custom passwords
  3. Beautiful, beautiful python
  4. Lichess.org chess bot!
  5. Socks 5 client support for twisted
  6. The art of cheating: Making a chess.com chess bot following an unusual approach!

2013 15

  1. Exploiting wordpress plugins through admin options (No 3. — Easy Media Gallery stored XSS)
  2. IAT hooking
  3. The dangers of a poorly planned project
  4. Cryptographically secure rand() replacement
  5. Wordpress comment form with bootstrap v3.0.2
  6. A tale of a twofold broken wordpress captcha plugin
  7. Create your own font the hard way!
  8. Plotting Bézier curves directly and with De Casteljau's algorithm
  9. No 2. - flash-album-gallery: persistent XSS exploitet with help of XSRF leading to remote code execution.
  10. Major Redesign of incolumitas.com
  11. Python and curses - A small textbox selection example.
  12. Create anonymous identites with fakenamegenerator.com and Python
  13. No 1. - wp-members: Interesting peristant XSS leading to remote code execution.
  14. Another wordpress catpcha implementation
  15. GoogleScraper.py - A simple python module to parse google search results.

2012 5

  1. Linux/Unix privileges from a blackhats perspective
  2. Bullet chess challenge :)
  3. Bullet Chess - A silly game?
  4. Web safe Base64 Encode/Decode in C
  5. Short essay about my experiences on duolingo.com