Top all-time · #7800
Jordan Wright
Personal blog · jordan-wright.github.io/blogsecurityprogramming
Jordan Wright's personal blog at jordan-wright.github.io covers security and programming. Since 2013, 9 different Hacker News readers have linked it 36 times, most often “Remote Code Execution in Elasticsearch – CVE-2015-1427”. It is still writing: the last post was on 2026-04-18, and you can follow it by feed.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN commenters link Jordan Wright's posts on automating email-address discovery, a Rapportive XSS in Gmail, and an ElasticSearch security issue. The comments cite these posts as references and do not judge the writing.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Jordan Wright is a security researcher in the information security field.
Most-linked posts?
- Remote Code Execution in Elasticsearch – CVE-2015-14273 people · 3 mentions · first linked 2015-03-08
- Automated Recon Using Rapportive2 people · 4 mentions · first linked 2013-10-26
- Phishing with Linkedin's Intro2 people · 2 mentions · first linked 2013-10-28
- Creating Tor Hidden Services with Python2 people · 2 mentions · first linked 2014-10-07
What Hacker News says?
Really? That's something I haven't heard of from a technical person in a very long while (if ever). LinkedIn's public image from the last 2 years: * 2012 hack. 6.5M unsalted SHA1 password hashes leaked [1] * 2013 Acquires Pulse, forces existing users to create a LinkedIn account. Users are pissed [2] * 2013 LinkedIn Intro. In case you missed it, it was an iOS app that changed your mail settings to proxy your incomin…
Comment linking /blog/2013/10/26/phishing-with-linkedins-intro/
on “LinkedIn is not using email contacts to find people who have an account already”Submitted Why Deleting Sensitive Information from GitHub Doesn't Save You as a story · 313 points
HN discussionfull-disclosure not mentioned in blog @ http://jordan-wright.github.io/blog/2013/10/14/automated-soc...
Comment linking /blog/2013/10/14/automated-social-engineering-recon-using-rapportive
on “How I Automated “Finding Almost Anyone’s Email Address””Submitted Phishing with Linkedin's Intro as a story · 219 points
HN discussionI actually wrote a post a while back doing this exact thing: http://jordan-wright.github.io/blog/2013/10/14/automated-soc... You can find the full script automating the Rapportive API here: https://github.com/jordan-wright/rapportive
Comment linking /blog/2013/10/14/automated-social-engineering-recon-using-rapportive/
on “How I Automated “Finding Almost Anyone’s Email Address””Submitted Linkedin's Response to My "Phishing with Intro" Post as a story · 144 points
HN discussionrapportive is a quite versatile tool... http://jordan-wright.github.io/blog/2013/10/14/automated-soc...
Comment linking /blog/2013/10/14/automated-social-engineering-recon-using-rapportive/
on “XSS in Gmail through Rapportive ”Submitted Remote Code Execution in Elasticsearch – CVE-2015-1427 as a story · 90 points
HN discussionHey there! Author here - thanks for posting this! In response to this, I made an open-source honeypot (in Go!) called Elastichoney. I recently released every single log I collected in nice JSON form: http://jordan-wright.github.io/blog/2015/05/11/60-days-of-wa... Let me know if you have any questions!
Comment linking /blog/2015/05/11/60-days-of-watching-hackers-attack-elasticsearch/
on “Remote Code Execution in Elasticsearch – CVE-2015-1427”Submitted Wireless Attacks With Python: Part One - the "Dnspwn Attack" as a story · 81 points
HN discussionI'm always reluctant to these kinds of ideas, of executing code on/within my database server. I know it's apparently sandboxed, but that didn't work out too well for ElasticSearch recently: https://jordan-wright.github.io/blog/2015/03/08/elasticsearc... .
Comment linking /blog/2015/03/08/elasticsearch-rce-vulnerability-cve-2015-1427/
on “In-database R coming to SQL Server 2016”Submitted 60 Days of Watching Hackers Attack Elasticsearch as a story · 9 points
HN discussionCurrently working on Gophish ( https://github.com/jordan-wright/gophish ), an open-source phishing toolkit designed to help businesses and pentesters to quickly conduct phishing campaigns. The project is being built with Go and Angular, so it will hopefully be a dead-simple application to install. I'm also blogging about it occasionally here: http://jordan-wright.github.io/blog/categories/gophish/ .
Comment linking /blog/categories/gophish/
on “What side projects did you start in 2014?”Submitted Web Scraping Hotel Prices for Fun and Savings as a story · 9 points
HN discussionWhoops, typo - try here: https://jordan-wright.github.io/blog/2014/12/19/what-happens...
Comment linking /blog/2014/12/19/what-happens-if-tor-directory-authorities-are-seized/
on “What Happens If Tor Directory Authorities Are Siezed?”Submitted How Tor Works: Part Two – Relays vs. Bridges as a story · 7 points
HN discussionSubmitted Remote Code Execution in Elasticsearch – CVE-2015-1427 as a story · 7 points
HN discussionSubmitted What Happens If Tor Directory Authorities Are Seized? as a story · 3 points
HN discussionSubmitted Reverse Engineering the We Heart It API as a story · 3 points
HN discussionSubmitted Creating Tor Hidden Services with Python as a story · 3 points
HN discussionSubmitted Automated Recon Using Rapportive as a story · 3 points
HN discussionSubmitted How Tor Works – The Consensus as a story · 2 points
HN discussionSubmitted Remote Code Execution in Elasticsearch – CVE-2015-1427 as a story · 2 points
HN discussionSubmitted How Tor Works: Part One as a story · 2 points
HN discussionSubmitted Solving the SANS Holiday Challenge as a story · 2 points
HN discussionSubmitted Chrome Tracks Every Key Typed into the URL Bar as a story · 2 points
HN discussionSubmitted What Happens If Tor Directory Authorities Are Seized? as a story · 2 points
HN discussionSubmitted What Happens If Tor Directory Authorities Are Siezed? as a story · 2 points
HN discussionSubmitted Chrome Tracks Every Key Typed into the Omnibox as a story · 2 points
HN discussionSubmitted Creating Tor Hidden Services with Python as a story · 2 points
HN discussion
