Curiosity in Practice
My favorite open source tool for analyzing PCAP files is CapAnalysis and I have always kept a virtual machine around to run this software but I have been on a kick of containerizing all my favorite tools recently so I decided to put CapAnalysis into a container. It allows you to easily visualize the traffic flow, statistics, geolocation and … Read more
I always do this… I wrote KaliBrowser over the weekend and today at lunch I was thinking this same setup would be really handy to use with Burp so I put together BurpBrowser that lets you run Burp and Firefox in a browser. It runs the following packages: Ubuntu 16.04 Burp Proxy Firefox OpenBox NoVNC Getting started is … Read more
I have been spending some time recently getting up to speed on Docker so this weekend I built KaliBrowser: It runs the following packages: Kali Docker OpenBox NoVNC Getting started is as easy as: docker run -d -t -i -p 6080:6080 jgamblin/kalibrowser and then point your favorite browser to: http://ip:6080 To keep this image as small … Read more
Yesterday I was in a situation where I was helping someone who needed to monitor and record all the traffic from a couple of servers for a day to investigate a strange issue that was happening. Normally for this I would just tell them to run this command to record a day’s worth of traffic into … Read more
This morning I needed someone who I was helping to provide me some basic information about their Macbook and realized while I knew how to get that information it wasnt all in one easy to digest place so I wrote sysinfo.sh to quickly gather that information: Here is the code: https://gist.github.com/jgamblin/aa9a6eda5bce6797ab8394e0c47d3676 You will need to install … Read more
During a recent round of phone interviews while expanding my team at work I was amazed at how many security professionals have a hard time clearly answering the following question: “What’s the difference between a threat, a vulnerability and a risk?” I think being able to do so is a key to being a good … Read more
Often in my job I am given spreadsheets of IP addresses that look like this: One of the first things I always want to do is find if they have a FQDN. Sadly Google … Read more
At the start of every month I pick a quote I like and hang it at my desk and try to use it to guide my thought process for the month and I thought I would share them here as I was cleaning off my desk for the year. Here are the quotes I used … Read more
On Wednesday night I tweeted this: If you are using TrueCrypt you should stop. Hashcat is now optimized to crack TrueCrypt volumes. https://t.co/voBdtKuuHW — Jerry Gamblin (@JGamblin) December 10, 2015 I started getting retweets and replies like this on Friday from people I respect (and a bunch from people I don’t know): https://twitter.com/kylemaxwell/status/675420596025585664 https://twitter.com/averagesecguy/status/674768017864134657 So people … Read more
How the conversation goes when someone tells me they want to get into “hacking”: