Curiosity in Practice
jgamblin I had a 2014 Dell Chromebook 11 I was not doing anything so I decided to turn it into a stand alone Kali box using the Chromium OS Universal Chroot Environment. The installation steps are pretty simple: Add a l33t hacker sticker: Enable Developer Mode (this will wipe the device). Login and download the latest crouton. Access … Read more
A picture started floating around the internet of Mark Zuckerberg holding an Instagram cutout: People almost instantly started to notice that his webcam and mic were taped over. While Mark Zuckerberg isnt exactly known for having great security practices, all his social media passwords were Dadada. This started a discussion in the office if someone … Read more
While rebuilding my iPad this weekend I noticed that I could name it an emoji. So I named my iPad 📱(U+1F4F1): While I don’t have any problem using the iPad it basically makes it unreachable on the network via hostname. From there I renamed all of my lab machines emojis. Mostly variations of 💩 (U+1F4A9) because I … Read more
Earlier today I ran across this blog post on hijacking windows .lnk file so I decided to build out and test a full POC for it using Windows 8.1. To reproduce this just copy these 7 lines into powershell and ctrl+c now runs calc.exe instead of copying your text: https://gist.github.com/jgamblin/4aa897a2cca6912eeea96a12d73d8cd6 For extra jerkiness this will shutdown a windows … Read more
While getting ready to teach an “introduction to penetration testing with docker ” class I stumbled across the Shipyard-Project which brings an amazing web based interface to docker. Installing on Debian on DigitalOcean is as simple as starting a droplet and running these two commands: curl -sSL https://get.docker.com/ | sh curl -sSL https://shipyard-project.com/deploy | bash -s Update: Running scripts … Read more
Docker containers have become so ubiquitous sometimes respected security professionals tweet ridiculous things like: docker run -u zap -p 8080:8080 -p 8090:8090 -i owasp/zap2docker-stable zap-webswing.sh http://localhost:8080/?anonym=true&app=ZAP — Jerry Gamblin (@JGamblin) June 7, 2016 …but it is 2016 and you should never run code on your machine if you don’t know what it does. These are mini-virtual machines … Read more
I built a simple TOR socks proxy container today to be able to easily use TOR to machines I am working on. Getting it to run is as simple as: docker run –name tor -ti -p 9050:9050 jgamblin/tor This will run it as a daemon: docker run –name tor -ti -p 9050:9050 jgamblin/tor From there all you … Read more
My favorite open source tool for analyzing PCAP files is CapAnalysis and I have always kept a virtual machine around to run this software but I have been on a kick of containerizing all my favorite tools recently so I decided to put CapAnalysis into a container. It allows you to easily visualize the traffic flow, statistics, geolocation and … Read more
I always do this… I wrote KaliBrowser over the weekend and today at lunch I was thinking this same setup would be really handy to use with Burp so I put together BurpBrowser that lets you run Burp and Firefox in a browser. It runs the following packages: Ubuntu 16.04 Burp Proxy Firefox OpenBox NoVNC Getting started is … Read more
I have been spending some time recently getting up to speed on Docker so this weekend I built KaliBrowser: It runs the following packages: Kali Docker OpenBox NoVNC Getting started is as easy as: docker run -d -t -i -p 6080:6080 jgamblin/kalibrowser and then point your favorite browser to: http://ip:6080 To keep this image as small … Read more