Curiosity in Practice
jgamblin This morning I needed someone who I was helping to provide me some basic information about their Macbook and realized while I knew how to get that information it wasnt all in one easy to digest place so I wrote sysinfo.sh to quickly gather that information: Here is the code: https://gist.github.com/jgamblin/aa9a6eda5bce6797ab8394e0c47d3676 You will need to install … Read more
During a recent round of phone interviews while expanding my team at work I was amazed at how many security professionals have a hard time clearly answering the following question: “What’s the difference between a threat, a vulnerability and a risk?” I think being able to do so is a key to being a good … Read more
I have a couple of old Raspberry Pi’s 2 laying around and have been meaning to turn them into “Remote Access Terminals” to demonstrate what happens if you do not do effective egress filtering on your network. At a high level if an attacker can plug in one of these on your network and get internet access they … Read more
I have been playing with the GL.inet hardware lately and stumbled upon this project called NetAidKit that is built on the $25 6416 platform that offers a purpose built TOR and VPN router. After building the images using the instructions on their github page (here is the one I built if you trust me) all you have to … Read more
My friend Steve Lord recently introduced me to ultra portable GL-inet routers. I picked up the $25 GL-AR150 to hack around on. One of the first things I noticed while reading through their blog was that the hardware was the same as the wifipineapple nano and someone had already ported the firmware to work on the AR150. Updating the firmware is … Read more