Top all-time · #8573
Trickster Dev
Personal blog · trickster.dev/postsecurityprogramming
Trickster Dev is a personal blog at trickster.dev about security and programming. Since 2021, 8 different Hacker News readers have linked it 123 times, most often “Simple ways to find exposed sensitive information”. It is still writing: the last post was on 2025-12-03, and you can follow it by feed.
Code level discussion of web scraping, gray hat automation, growth hacking and bounty hunting
Most-linked posts?
- Simple ways to find exposed sensitive information2 people · 2 mentions · first linked 2024-06-21
- cURL beyond the basics2 people · 2 mentions · first linked 2022-09-06
- Retrospective scraping of historical data from Internet Archive snapshots2 people · 2 mentions · first linked 2023-12-27
- JavaScript Obfuscation Techniques by Example2 people · 2 mentions · first linked 2022-07-10
- Notes from the Bug Hunters Methodology – Application Analysis v12 people · 2 mentions · first linked 2022-06-14
- SSH Tips and Tricks2 people · 2 mentions · first linked 2024-02-04
- Scraping Clutch for B2B company data2 people · 2 mentions · first linked 2024-04-12
- Setting up rooted Android emulator with Frida and mitmproxy2 people · 2 mentions · first linked 2025-09-12
- Lesser known parts of Python standard library2 people · 2 mentions · first linked 2024-08-19
What Hacker News says?
As long as there's no certificate pinning implemented in the apps (which can be defeated with some effort) I would go with a different approach and use mitmproxy. See: https://www.trickster.dev/post/setting-up-mitmproxy-with-and...
Comment linking /post/setting-up-mitmproxy-with-android/
on “Decrypting your own HTTPS traffic with Wireshark”Submitted Decrypting your own HTTPS traffic with Wireshark as a story · 531 points
HN discussionI look forward to a (updated) version of this blog post. Simple ways to find exposed sensitive information (from LLMs) https://www.trickster.dev/post/simple-ways-to-find-exposed-s...
Comment linking /post/simple-ways-to-find-exposed-sensitive-information/
on “Building Figma AI”Submitted Running GUI apps within Docker containers as a story · 330 points
HN discussionSeems like a fairly shallow (content marketing fluff) substack to be honest. There are better places to follow, like: https://www.trickster.dev/post/
Comment linking /post/
on “Ask HN: Have you ever used anti detect browsers for web scraping?”Submitted You probably don’t need AWS and are better off without it as a story · 324 points
HN discussionthat said, mitming stuff even on Android can be a pain, so I use a rooted Android emulator with Frida. Even that can be a hassle sometimes. https://www.trickster.dev/post/setting-up-rooted-android-emu...
Comment linking /post/setting-up-rooted-android-emulator-with-frida-and-mitmproxy/
on “We intercepted the White House app's traffic. 77% of requests go to 3rd parties”Submitted Lesser known parts of Python standard library as a story · 279 points
HN discussionSubmitted Scapy: Low level packet hacking toolkit for Python as a story · 230 points
HN discussionSubmitted Simple ways to find exposed sensitive information as a story · 127 points
HN discussionSubmitted JavaScript Obfuscation Techniques by Example as a story · 105 points
HN discussionSubmitted Sending notifications programmatically: let me count the ways as a story · 101 points
HN discussionSubmitted Using ephemeral Onion Services for quick NAT traversal as a story · 69 points
HN discussionSubmitted Strategies and patterns of gray hat social media automation as a story · 50 points
HN discussionSubmitted How to Scrape Zillow with Python and Scrapy as a story · 38 points
HN discussionSubmitted Understanding Socks Protocol as a story · 7 points
HN discussionSubmitted Lesser known parts of Python standard library as a story · 6 points
HN discussionSubmitted SSH Tips and Tricks as a story · 5 points
HN discussionSubmitted ImageMagick: Programmable Image Processing Toolkit as a story · 5 points
HN discussionSubmitted Setting up rooted Android emulator with Frida and mitmproxy as a story · 4 points
HN discussionSubmitted SSH Tips and Tricks as a story · 4 points
HN discussionSubmitted You don’t typically need Selenium for scraping and automation as a story · 4 points
HN discussionSubmitted Scraping Data from Google Places API as a story · 3 points
HN discussionSubmitted JavaScript AST manipulation: reducing indirection, undoing string concealing as a story · 3 points
HN discussionSubmitted Wget Tips and Tricks as a story · 3 points
HN discussionSubmitted Active DNS Recon Techniques as a story · 3 points
HN discussionSubmitted cURL beyond the basics as a story · 3 points
HN discussionSubmitted Httpx: Modern Python module for doing HTTP(S) requests as a story · 3 points
HN discussionSubmitted Recon-ng: modular framework for OSINT automation as a story · 3 points
HN discussionSubmitted Curl Beyond the Basics as a story · 3 points
HN discussion