Information Security

wfuzz— Using the web brute forcer

I like wfuzz, I find it pretty intuitive to use and decided to write a little bit about a couple of use cases for this neat little tool.

All the usual caveats, there are so very many ways available to skin a cat, so this is by no means the only…

Tr0ll2 VM

Not done one of these in while, time to get back on the horse.

Link:

Secure DevOps Framework — Summary

DevOps is a new mindset for a business adopting it, and it’s one that is necessarily going to take some time to really get it working. Since it’s new for everyone, there are concerns, questions, and objections going to come from all parts of your business and IT teams.

Blue Team Fundamentals.

It isn’t easy being blue…

I’ve complained about this before, blogging about Blue teaming is difficult. Blue teaming is difficult.

“Hey check us out, we didn’t have any breaches last month”.

Secure DevOps #4 — Embedded Expertise

This is the final in a series of posts that will outline a framework I’ve developed and successfully deployed for applying effective security to a DevOps environment.

To publish or not to publish…

In short, to publish.

I’m going to let you all into a secret, I suffer from a crippling condition. It has the snappy name of ‘blogging-intention-itus’ and has the following symptoms:

• Have ideas for things to blog about.

Anatomy of a VBA Malware Dropper

We saw some phishing traffic last week with an Excel VBA Macro…

Vulnhub.com — Tommy Boy CTF Walkthrough

Another day, another Vulnhub CTF.

I can see this becoming a bit of an addiction — but it’s a good thing because it’s an addiction which actually stands a chance of materially benefitting me with the new skills I’m picking up. Compared…