Vulnhub.com — Mr. Robot 1 CTF Walkthrough

As a grumpy architect, in collaboration with a grumpy analyst, it was decided that we should sharpen and hone our hacking skills by doing some CTF — capture the flag — challenges.

Blue Team fundamentals Part Two: Windows Processes.

In part one I touched on logging and the importance of working with what you have already got, rather than trying to reinvent the wheel. There is no point adding more logs if you’re not looking at what is already there. The same can be said…

wfuzz— Using the web brute forcer

I like wfuzz, I find it pretty intuitive to use and decided to write a little bit about a couple of use cases for this neat little tool.

All the usual caveats, there are so very many ways available to skin a cat, so this is by no means the only…

Vulnhub.com — Tr0ll2 CTF Walkthrough

I’m warming up, stretches and leans, so that I can pull the trigger and start my OSCP, so an invite to play another VM from Pete was fortunate timing.

This time I’m battling Tr0ll2. I didn’t battle Tr0ll1, but presumably it’s going to…

Vulnhub.com — Tommy Boy CTF Walkthrough

Another day, another Vulnhub CTF.

I can see this becoming a bit of an addiction — but it’s a good thing because it’s an addiction which actually stands a chance of materially benefitting me with the new skills I’m picking up. Compared…

Vulnhub VM — IMF — Impossible Mission Force!

TL:DR

Blue Team Fundamentals.

It isn’t easy being blue…

I’ve complained about this before, blogging about Blue teaming is difficult. Blue teaming is difficult.

“Hey check us out, we didn’t have any breaches last month”.

Quick One: Stop Calling it ‘Identity Theft’

This is just a quick post inspired by some comments that I’ve seen recently on Twitter following some mega-breaches.

The term ‘Identity Theft’ implies, and its usage accepts, that the person whose identity is being stolen is the…