Curiosity in Practice
This morning I needed someone who I was helping to provide me some basic information about their Macbook and realized while I knew how to get that information it wasnt all in one easy to digest place so I wrote sysinfo.sh to quickly gather that information: Here is the code: https://gist.github.com/jgamblin/aa9a6eda5bce6797ab8394e0c47d3676 You will need to install … Read more
During a recent round of phone interviews while expanding my team at work I was amazed at how many security professionals have a hard time clearly answering the following question: “What’s the difference between a threat, a vulnerability and a risk?” I think being able to do so is a key to being a good … Read more
I have a couple of old Raspberry Pi’s 2 laying around and have been meaning to turn them into “Remote Access Terminals” to demonstrate what happens if you do not do effective egress filtering on your network. At a high level if an attacker can plug in one of these on your network and get internet access they … Read more
I have been playing with the GL.inet hardware lately and stumbled upon this project called NetAidKit that is built on the $25 6416 platform that offers a purpose built TOR and VPN router. After building the images using the instructions on their github page (here is the one I built if you trust me) all you have to … Read more
After spending last night working on a Reverse DNS Function for Google Sheets I couldnt leave well enough alone and wrote Shodan2Sheets tonight using the shodan.io api. It provides a lot more information than the reverse lookup function and all you should have to do is copy your API key to C2 and then start filling in … Read more