Blue Team fundamentals Part Two: Windows Processes.

In part one I touched on logging and the importance of working with what you have already got, rather than trying to reinvent the wheel. There is no point adding more logs if you’re not looking at what is already there. The same can be said…

wfuzz— Using the web brute forcer

I like wfuzz, I find it pretty intuitive to use and decided to write a little bit about a couple of use cases for this neat little tool.

All the usual caveats, there are so very many ways available to skin a cat, so this is by no means the only…

Vulnhub.com — Tr0ll2 CTF Walkthrough

I’m warming up, stretches and leans, so that I can pull the trigger and start my OSCP, so an invite to play another VM from Pete was fortunate timing.

This time I’m battling Tr0ll2. I didn’t battle Tr0ll1, but presumably it’s going to…

Blue Team Fundamentals.

It isn’t easy being blue…

I’ve complained about this before, blogging about Blue teaming is difficult. Blue teaming is difficult.

“Hey check us out, we didn’t have any breaches last month”.

Quick One: Stop Calling it ‘Identity Theft’

This is just a quick post inspired by some comments that I’ve seen recently on Twitter following some mega-breaches.

The term ‘Identity Theft’ implies, and its usage accepts, that the person whose identity is being stolen is the…

Sudon’t escape so easily!

How poor sudo configuration leads to simple full root access.

** I’ve added some ninja edits halfway down to clarify some things **

Vulnhub: Depth VM Walkthrough

Time to go deep(ish)!

Billu: b0x VM

A Vulnerable VM walkthrough: