Curiosity in Practice
jgamblin Yesterday I was in a situation where I was helping someone who needed to monitor and record all the traffic from a couple of servers for a day to investigate a strange issue that was happening. Normally for this I would just tell them to run this command to record a day’s worth of traffic into … Read more
At work we are moving to slack as a communication method and since I am spending so much time in the tool I decided it was time to start building in some of the tools I use on a regular basis. So far I have put together the following tools: /NMAP Nmap-For-Slack runs a basic … Read more
The TV in my hotel room this week advertised how easy it is to control it with the stayconnect app. So I downloaded it and was pretty impressed by how well it worked…. until I remembered my phone was still on 4G and VPNed through a server in Europe. So I fired up Burp Suite to … Read more
Last week I saw this 3.5″ Touchscreen LCD and case on Amazon for $20 so I ordered it thinking it would be fairly easy to install and get to work. I was wrong and spent the better part of a Saturday looking at this: After spending 5 or 6 hours digging through forums, reddit posts … Read more
This morning I needed someone who I was helping to provide me some basic information about their Macbook and realized while I knew how to get that information it wasnt all in one easy to digest place so I wrote sysinfo.sh to quickly gather that information: Here is the code: https://gist.github.com/jgamblin/aa9a6eda5bce6797ab8394e0c47d3676 You will need to install … Read more
During a recent round of phone interviews while expanding my team at work I was amazed at how many security professionals have a hard time clearly answering the following question: “What’s the difference between a threat, a vulnerability and a risk?” I think being able to do so is a key to being a good … Read more
I have a couple of old Raspberry Pi’s 2 laying around and have been meaning to turn them into “Remote Access Terminals” to demonstrate what happens if you do not do effective egress filtering on your network. At a high level if an attacker can plug in one of these on your network and get internet access they … Read more
I have been playing with the GL.inet hardware lately and stumbled upon this project called NetAidKit that is built on the $25 6416 platform that offers a purpose built TOR and VPN router. After building the images using the instructions on their github page (here is the one I built if you trust me) all you have to … Read more
My friend Steve Lord recently introduced me to ultra portable GL-inet routers. I picked up the $25 GL-AR150 to hack around on. One of the first things I noticed while reading through their blog was that the hardware was the same as the wifipineapple nano and someone had already ported the firmware to work on the AR150. Updating the firmware is … Read more
After spending last night working on a Reverse DNS Function for Google Sheets I couldnt leave well enough alone and wrote Shodan2Sheets tonight using the shodan.io api. It provides a lot more information than the reverse lookup function and all you should have to do is copy your API key to C2 and then start filling in … Read more