Collaborate Disseminate
Lately, I’ve noticed a lot of FB notifications of friends asking stupid questions from other pages. The questions are usually along the lines of "What’s the first movie you saw in the cinema?", "What’s the next number in thi… Continue reading How do Facebook question pages get your data and what data do they get?
I am making a series of python scripts for data overwriting. My current prototype creates a series of large files and simply fills the memory (using a different system for additional overwrites). Is there an advantage to overwriting the en… Continue reading File based background data eraser
once sent a text to a contact in my phone but the text message was recieved by a different contact in my phone, my phone showed i sent it to such and such but the answer was recieved from a different contract in my phone, it was a general … Continue reading How can text messages get mixed up and recieved by someone else
Welcome to the second post in our series on getting started using AWS services for OSINT. Last post we covered setting up an AWS account, getting the command line interface installed and configured with your credentials and using the Rekognition … Continue reading → Continue reading Nation State Quality OSINT on a Taco Bell Budget – Part 2
I remember taking digital forensics classes years ago and at the very end of the class feeling like I had learned a ton, had a great time, but was also wondering “Ok, what’s next?” When I’m teaching OSINT or other … Continue reading → Continue reading Nation State Quality OSINT on a Taco Bell Budget – Part 1
What I want to do: Lock down the Tech Vlan so that only an approved device AND a user in the tech security group are allocated. I am hoping to achieve this via EAP-TTLS and Windows NPS whereby the machine provides the tunnel then the user … Continue reading Can EAP-TTLS provide the dual authentication I require?
The password was lost and darned if I would remember it. I exported the config file from my phone which I can still use to login using the saved password but that doesn’t help him login cause I can’t retrieve the password.
String – A29D9… Continue reading I made up a password a few years ago for a customer – [closed]
I was browsing my spam folder on my phone in the gmail app and stupidly let curiosity get the better of me. The app had blocked images by default but I clicked to allow them as well as accidentally clicked a link in the email while scroll… Continue reading Accidentally clicked spam email link on android, risk of malware?
I have a question about Tomcat vulnerability CVE-2020-1938 aka Ghostcat. The security researcher who discovered the vulnerability created a write up here: https://www.chaitin.cn/en/ghostcat and a PoC here: https://github.com/YDHCUI/CNVD-20… Continue reading Tomcat AJP vulnerability CVE-2020-1938 aka Ghostcat
Tomorrow I’ll be giving a talk on breach data including: Places where it’s located How to make large data sets searchable in a reasonable amount of time How some organizations are using breach data to improve their security posture Whenever … Continue reading → Continue reading Filelocator Pro Tips and Tricks for Indexing Large Breach Data Sets