{"id":228057,"date":"2013-06-28T10:59:00","date_gmt":"2013-06-28T09:59:00","guid":{"rendered":"http:\/\/securite.intrinsec.com\/?p=1153"},"modified":"2013-06-28T10:59:00","modified_gmt":"2013-06-28T09:59:00","slug":"hack-in-paris-2013","status":"publish","type":"post","link":"https:\/\/www.intrinsec.com\/en\/hack-in-paris-2013\/","title":{"rendered":"Report: Hack In Paris 2013"},"content":{"rendered":"

Intrinsec was present at the third edition of\u00a0Hack In Paris<\/a>, From June 20th to 21st, the main theme of which was BYOD (Bring Your Own Device) was discussed. Here is a summary of the best presentations from those two days.<\/p>\n

First day<\/strong><\/h1>\n

Remoting android applications for fun and profit<\/strong><\/h2>\n

by Damien Cauquil & Pierre Jaury<\/h2>\n

Damien Cauquil and Pierre Jaury have therefore developed three tools: Fino, Gadget, and Client. The principle is as follows: you decompile an Android application, merge the code with that of Fino, recompile and install the "new" application on your smartphone, and launch the Gadget application, which acts as a...\u00a0proxy<\/em>\u00a0The application can then be controlled from a computer, using Python and the Client. The Client communicates with the Gadget using TCP (typically the computer and smartphone are connected to the same Wi-Fi network), and the Gadget communicates with the application using Fino, which is injected into it. This facilitates reverse engineering an Android application. Demonstrations of\u00a0fuzzing<\/em>\u00a0The DTMF answerer hacking and cheating at a game in just a few minutes were quite remarkable. The code is\u00a0available on Github<\/a>.<\/p>\n

The Security of MDM (Mobile Device Management) systems<\/strong>
\nby Sebastien Andrivet<\/h2>\n

Sebastien Andrivet investigated the security of two MDM solutions (Mobile Iron and Good Technology) with the following scenario: can an administrator of the MDM solution access employee emails? Multiple vulnerabilities were identified: the need to use an Administrator account to run the service, the inability to place the MDM solution in a DMZ, the need to authorize the MDM solution to access all mailboxes (by creating a privileged account), XSS and CSRF vulnerabilities in the administration interfaces, the use of "in-house cryptography" to store passwords, etc. Even though some vulnerabilities have been fixed, MDM solution vendors still have progress to make.<\/p>\n

Burp Pro: Real-life tips and tricks<\/strong>
\nby Nicolas Gr\u00e9goire<\/h2>\n

During this presentation, Nicolas Gr\u00e9goire reviewed the various advanced features of the renowned interception proxy, enabling penetration testers to be more effective during a web application penetration test, and in particular:<\/p>\n

    \n
  • available visualization methods (AMF, JSON, PROTOBUF\u2026); ;<\/li>\n
  • \u00ab"state management" (automatic backup, restoring a state...); ;<\/li>\n
  • common tasks (\u00abGET to POST\u00bb, generation of the CURL command to replay the exploitation of a vulnerability\u2026); ;<\/li>\n
  • extension mechanism.<\/li>\n<\/ul>\n

    The presentation provides excellent publicity for the Pro version of the tool, which proves to be interesting due to its advanced features.<\/p>\n

    Day Two<\/h1>\n

    Are we getting better? \u2013 Hacking Todays Technology<\/strong>
    \nby Dave Kennedy<\/h2>\n

    To kick off the second day, Dave Kennedy criticized current security solutions (Next Generation Firewalls, WAFs, etc.). After demonstrating SET and Unicorn, tools he developed, and asserting that these security solutions were ineffective, he recommended the following approach to improving security:<\/p>\n

      \n
    • 1: Change the culture (educate, ensure that security is no longer a constraint\u2026):<\/li>\n
    • 2: stop buying security solutions for one year; ;<\/li>\n
    • 3: Focus on the basics (default passwords, classic vulnerabilities such as SQL injections); ;<\/li>\n
    • 4: Monitor your IS; ;<\/li>\n
    • 5: Perform penetration tests.<\/li>\n<\/ul>\n

      Malware vs Virtualization: The endless cat and mouse play<\/strong>
      \nby Aur\u00e9lien Wailly<\/h2>\n

      Aur\u00e9lien Wailly presented methods for detecting a virtualized environment: searching for specific DLLs, measuring access times (his tests made it possible to know exactly the type of hypervisor used)... He then presented methods for avoiding this detection: "patching" "virtualization flaws", setting up thresholds to prevent measuring access times... Aur\u00e9lien Wailly ended his presentation with the following question: at a time when more and more environments are virtualized (workstations in particular), is it still relevant for malware to detect a virtualized environment?<\/p>\n

      The \u00abClassical Doctrine\u00bb of Websecurity and the inner HTML Apocalypse: How MXSS attacks change everything we believed to know so far<\/strong><\/h2>\n

      by Mario Heiderich<\/h2>\n

      Mario Heiderich began with a brief overview of current XSS vulnerabilities: Reflected XSS, Stored XSS, and DOM-based XSS. He then presented MXSS (Mutation XSS) based on the JavaScript function "innerHTML," which allows modification of a web page's HTML code. When using this function, browsers "improve" the modified HTML code to make it "compliant": closing tags, adding quotation marks, etc. This "improvement" is not always perfect, and it is possible to inject code:<\/p>\n

        \n
      • use of ` instead of \u00bb in Internet Explorer; ;<\/li>\n
      • use of attributes such as xmlns or style; ;<\/li>\n
      • \u2026<\/li>\n<\/ul>\n

        The Realex payments application security story, narrated by Security Ninja<\/strong>
        \nby David Rook<\/h2>\n

        Hack In Paris ended with a presentation by David Rook in an original format. Against a backdrop of comic strip-style slides, David Rook recounted the work done at Realex Payment over the past 7 or 8 years to improve software security: creation of an internal training program, purchase of a Burp Pro license for each developer, conducting annual audits, publications (tweets, open source tools).<\/p>","protected":false},"excerpt":{"rendered":"

        Intrinsec \u00e9tait pr\u00e9sent \u00e0 la troisi\u00e8me \u00e9dition de\u00a0Hack In Paris, du 20 au 21 juin, […]<\/p>\n","protected":false},"author":13,"featured_media":1167,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[101],"class_list":["post-228057","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-veille-securite","tag-hip"],"yoast_head":"\nCompte rendu : Hack In Paris 2013 - INTRINSEC<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.intrinsec.com\/en\/hack-in-paris-2013\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Compte rendu : Hack In Paris 2013\" \/>\n<meta property=\"og:description\" content=\"Intrinsec \u00e9tait pr\u00e9sent \u00e0 la troisi\u00e8me \u00e9dition de\u00a0Hack In Paris, du 20 au 21 juin, […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.intrinsec.com\/en\/hack-in-paris-2013\/\" \/>\n<meta property=\"og:site_name\" content=\"INTRINSEC\" \/>\n<meta property=\"article:published_time\" content=\"2013-06-28T09:59:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/03\/placeholder-50.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"800\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Intrinsec\" \/>\n<meta name=\"twitter:site\" content=\"@Intrinsec\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/hack-in-paris-2013\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/hack-in-paris-2013\\\/\"},\"author\":{\"name\":\"Admin\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/person\\\/5636e3e5276b952facbd0aadb12a858a\"},\"headline\":\"Compte rendu : Hack In Paris 2013\",\"datePublished\":\"2013-06-28T09:59:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/hack-in-paris-2013\\\/\"},\"wordCount\":948,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/hack-in-paris-2013\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/placeholder-50.png\",\"keywords\":[\"HIP\"],\"articleSection\":[\"Veille S\u00e9curit\u00e9\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.intrinsec.com\\\/hack-in-paris-2013\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/hack-in-paris-2013\\\/\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/hack-in-paris-2013\\\/\",\"name\":\"Compte rendu : Hack In Paris 2013 - INTRINSEC\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/hack-in-paris-2013\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/hack-in-paris-2013\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/placeholder-50.png\",\"datePublished\":\"2013-06-28T09:59:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/hack-in-paris-2013\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.intrinsec.com\\\/hack-in-paris-2013\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/hack-in-paris-2013\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/placeholder-50.png\",\"contentUrl\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/placeholder-50.png\",\"width\":1200,\"height\":800},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/hack-in-paris-2013\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.intrinsec.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Compte rendu : Hack In Paris 2013\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#website\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/\",\"name\":\"INTRINSEC\",\"description\":\"Notre m\u00e9tier , Prot\u00e9ger le v\u00f4tre\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.intrinsec.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\",\"name\":\"INTRINSEC\",\"alternateName\":\"ISEC\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/libellule.png\",\"contentUrl\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/libellule.png\",\"width\":1322,\"height\":1322,\"caption\":\"INTRINSEC\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Intrinsec\",\"https:\\\/\\\/fr.linkedin.com\\\/company\\\/intrinsec\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UC0trUZAHNZOUbxYnNdecM4A\"],\"description\":\"soci\u00e9t\u00e9 de consulting, pure player cybers\u00e9curit\u00e9 fran\u00e7ais et europ\u00e9en depuis plus de 30ans, sp\u00e9cialiste dans la s\u00e9curit\u00e9 offensive & audit (pentest\\\/red team), GRC, et services IMSS comme le SOC, CTI et CERT Intrinsec est qualifi\u00e9 PASSI Elev\u00e9, PRIS Elev\u00e9 et PACS par l'ANSSI\",\"email\":\"contact@intrinsec.com\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/person\\\/5636e3e5276b952facbd0aadb12a858a\",\"name\":\"Admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=retro&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=retro&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/?s=96&d=retro&r=g\",\"caption\":\"Admin\"},\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/en\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Report: Hack In Paris 2013 - INTRINSEC","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.intrinsec.com\/en\/hack-in-paris-2013\/","og_locale":"en_US","og_type":"article","og_title":"Compte rendu : Hack In Paris 2013","og_description":"Intrinsec \u00e9tait pr\u00e9sent \u00e0 la troisi\u00e8me \u00e9dition de\u00a0Hack In Paris, du 20 au 21 juin, […]","og_url":"https:\/\/www.intrinsec.com\/en\/hack-in-paris-2013\/","og_site_name":"INTRINSEC","article_published_time":"2013-06-28T09:59:00+00:00","og_image":[{"width":1200,"height":800,"url":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/03\/placeholder-50.png","type":"image\/png"}],"author":"Admin","twitter_card":"summary_large_image","twitter_creator":"@Intrinsec","twitter_site":"@Intrinsec","twitter_misc":{"Written by":"Admin","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.intrinsec.com\/hack-in-paris-2013\/#article","isPartOf":{"@id":"https:\/\/www.intrinsec.com\/hack-in-paris-2013\/"},"author":{"name":"Admin","@id":"https:\/\/www.intrinsec.com\/#\/schema\/person\/5636e3e5276b952facbd0aadb12a858a"},"headline":"Compte rendu : Hack In Paris 2013","datePublished":"2013-06-28T09:59:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.intrinsec.com\/hack-in-paris-2013\/"},"wordCount":948,"commentCount":0,"publisher":{"@id":"https:\/\/www.intrinsec.com\/#organization"},"image":{"@id":"https:\/\/www.intrinsec.com\/hack-in-paris-2013\/#primaryimage"},"thumbnailUrl":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/03\/placeholder-50.png","keywords":["HIP"],"articleSection":["Veille S\u00e9curit\u00e9"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.intrinsec.com\/hack-in-paris-2013\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.intrinsec.com\/hack-in-paris-2013\/","url":"https:\/\/www.intrinsec.com\/hack-in-paris-2013\/","name":"Report: Hack In Paris 2013 - INTRINSEC","isPartOf":{"@id":"https:\/\/www.intrinsec.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.intrinsec.com\/hack-in-paris-2013\/#primaryimage"},"image":{"@id":"https:\/\/www.intrinsec.com\/hack-in-paris-2013\/#primaryimage"},"thumbnailUrl":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/03\/placeholder-50.png","datePublished":"2013-06-28T09:59:00+00:00","breadcrumb":{"@id":"https:\/\/www.intrinsec.com\/hack-in-paris-2013\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.intrinsec.com\/hack-in-paris-2013\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.intrinsec.com\/hack-in-paris-2013\/#primaryimage","url":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/03\/placeholder-50.png","contentUrl":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/03\/placeholder-50.png","width":1200,"height":800},{"@type":"BreadcrumbList","@id":"https:\/\/www.intrinsec.com\/hack-in-paris-2013\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.intrinsec.com\/"},{"@type":"ListItem","position":2,"name":"Compte rendu : Hack In Paris 2013"}]},{"@type":"WebSite","@id":"https:\/\/www.intrinsec.com\/#website","url":"https:\/\/www.intrinsec.com\/","name":"INTRINSEC","description":"Our job is to protect yours.","publisher":{"@id":"https:\/\/www.intrinsec.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.intrinsec.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.intrinsec.com\/#organization","name":"INTRINSEC","alternateName":"ISEC","url":"https:\/\/www.intrinsec.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.intrinsec.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/02\/libellule.png","contentUrl":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/02\/libellule.png","width":1322,"height":1322,"caption":"INTRINSEC"},"image":{"@id":"https:\/\/www.intrinsec.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Intrinsec","https:\/\/fr.linkedin.com\/company\/intrinsec","https:\/\/www.youtube.com\/channel\/UC0trUZAHNZOUbxYnNdecM4A"],"description":"Intrinsec, a consulting firm and pure-play French and European cybersecurity provider for over 30 years, specializes in offensive security and auditing (penetration testing\/red teams), GRC, and IMSS services such as SOC, CTI, and CERT. Intrinsec is qualified at PASSI High, PRIS High, and PACS levels by ANSSI.","email":"contact@intrinsec.com"},{"@type":"Person","@id":"https:\/\/www.intrinsec.com\/#\/schema\/person\/5636e3e5276b952facbd0aadb12a858a","name":"Admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=retro&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=retro&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/?s=96&d=retro&r=g","caption":"Admin"},"url":"https:\/\/www.intrinsec.com\/en\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts\/228057","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/comments?post=228057"}],"version-history":[{"count":0,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts\/228057\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/media\/1167"}],"wp:attachment":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/media?parent=228057"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/categories?post=228057"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/tags?post=228057"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}