joshua.hu valid

Automatically discovered from public files. Ownership management is optional. Inclusion does not imply endorsement or publisher participation.

Manage this listing — optional · Visit publisher ↗

Claim my listing on Agent Web Map for joshua.hu:
1. POST https://agentwebmap.com/v1/sites/joshua.hu/claims and keep claim_id and claim_secret private.
2. Publish the proof: add the line "AgentWebMap ownership: <token>" (token from step 1) to https://joshua.hu/llms.txt, or use the DNS, meta-tag or well-known method the response describes.
3. POST https://agentwebmap.com/v1/sites/joshua.hu/verify with {"claim_id": "...", "claim_secret": "..."}.
4. Save the api_key from the answer; it manages the listing (PATCH https://agentwebmap.com/v1/sites/joshua.hu).
MCP equivalent: tools begin_ownership_claim, then verify_domain, at https://agentwebmap.com/mcp. Docs: https://agentwebmap.com/docs#verify

Corrections or removal requests: contact the directory. Ownership management is optional.

Joshua Rogers' Scribbles — joshua.hu

Joshua Rogers' personal blog covering cybersecurity research, systems administration, offensive security, programming, and essays. Joshua is a security researcher with 12+ years of experience, formerly on the security team at Opera Software.

Their llms.txt

The beginning of the file, from our validated copy saved 2026-10-21T04:26:22.831Z. Cached copy · Source on joshua.hu

# Joshua Rogers' Scribbles — joshua.hu

> Joshua Rogers' personal blog covering cybersecurity research, systems administration, offensive security, programming, and essays. Joshua is a security researcher with 12+ years of experience, formerly on the security team at Opera Software.

_Generated: Sun, 18 Oct 2026 23:44:56 +0000_

## About

- [About Me](https://joshua.hu/about.md): [Joshua Rogers — security researcher, hacker, writer](https://joshua.hu/about)
- [Projects](https://joshua.hu/projects.md): [Portfolio of security tools and research projects](https://joshua.hu/projects)
- [Topics](https://joshua.hu/topics.md): [Posts organized by subject](https://joshua.hu/topics)
- [Contact](https://joshua.hu/contact.md): [Get in touch](https://joshua.hu/contact)

## Posts

### 2026

- [RCE (kind of) in Transmission BitTorrent's daemon](https://joshua.hu/transmission-cors-rpc-csrf-rce-drive-by-exploit.md): [Transmission sets Access-Control-Allow-Origin: * on its RPC endpoint and exposes the session-id token cross-origin, defeating the CSRF protection the RPC server relies on. Any website you visit can drive the RPC, change download-dir, set the torrent-done script, and get code execution: the exact threat model the session-id was added to stop in 2018.](https://joshua.hu/transmission-cors-rpc-csrf-rce-drive-by-exploit)
- [Lessons from using sanitizers as an oracle for LLM vulnerability triage](https://joshua.hu/lessons-using-sanitizers-oracle-llm-vulnerability-triage.md): [Lessons learnt from using memory sanitizers (ASan, MSan, UBSan, TSan, LSan) as deterministic oracles for triaging LLM-discovered vulnerabilities: how agents cheat the oracle, where the oracle goes blind, and a checklist for gating proofs-of-concept.](https://joshua.hu/lessons-using-sanitizers-oracle-llm-vulnerability-triage)
- [Being silly is the whole point](https://joshua.hu/whole-point-being-weird-silly.md): [On wearing a different absurd hat to the office every day to needle a manager who disliked silliness, and why anyone who cannot see past a silly appearance is too preoccupied with form to notice substance.](https://joshua.hu/whole-point-being-weird-silly)
- [A natural life](https://joshua.hu/natural-life.md): [A short list of everything the all-natural influencer lifestyler removes from their life.](https://joshua.hu/natural-life)
- [4 jsoup vulnerabilities](https://joshua.hu/4-jsoup-vulnerabilities.md): [An overview of four vulnerabilities I reported in jsoup, the Java HTML parser and sanitizer: mutation-XSS sanitizer bypasses, output-charset byte smuggling, and a quadratic namespace blowup, and how each was triaged.](https://joshua.hu/4-jsoup-vulnerabilities)
- [On self-imposed constraints and shame](https://joshua.hu/self-imposed-constraints.md): [An essay on self-imposed constraints and shame: legal supplements versus steroids, and AI-assisted exploit discovery](https://joshua.hu/self-imposed-constraints)
- [Design taste in the age of LLMs: visualizing CVE data](https://j
…

Related sites

Other listed sites in Cybersecurity. See the whole category →

Help agents understand your site

Optionally manage your description, publish terms for agents, review file health, measured discovery requests, publisher clicks and score history. Confirm domain control in your browser using a fresh token in your llms.txt, DNS, meta tag or well-known file. No backlink is required.

Manage this listing → · Agent and API instructions

Machine-readable: GET /v1/resolve?q=joshua.hu · GET /v1/domain/joshua.hu · this page as Accept: application/json or text/markdown · MCP lookup_domain