Uncategorized

I have started using the Burp Suite 2.0 beta full time recently, and some of the new features I knew I wanted to explore more was the API and the CI Integration.   I took a few hours this last week and built a small POC shell script that will scan a website and open Github Issues for all … Read more

Introduction I have always been a fan of Google Products, so when they announced the Google Home Hub, I ordered one. Once I got the Hub on my network I scanned it and it returned the following: Nmap scan report for hubHost is up (0.046s latency).Not shown: 995 closed portsPORT STATE SERVICE8008/tcp open http8009/tcp open ajp138443/tcp … Read more

The new rest API in Burp 2.0 it is going to be amazing but it will allow things like this 9 line shell script I wrote this morning that will grab all public bounty sites from  @arkadiyt’s  bounty-targets-data repo and kick off a full scan. https://gist.github.com/jgamblin/c22c0791af7572280d7fd569141650fe I almost didn’t post this blog because I *think* this script is, … Read more

I spend a lot of time working with MacOS and I have noticed that out of the box the operating system has some basic security settings that are not enabled by default so I have built a small script that automates configuring these. It does the following: Requires Password Immediately After Sleep. Turns On Firewall. Enables … Read more

Recently I have noticed that companies that use Google Suite have a fairly common misconfiguration that is making their internal groups public.  In some cases it is just the name of the groups but in some extreme cases the content of the posts are public. Testing for this misconfiguration on your domain is as easy … Read more