Collaborate Disseminate
With iOS 12 and the new Siri Shortcuts app, I’ve been thinking of ways I could leverage the SSH command capability in the app. For those of you who don’t know, the app allows you to send a bash file or string to stdin and ret… Continue reading Sending shutdown command via ssh using sudo non-interactively
As per the question. If I am connected to a website, streaming content from my native IP and I then enable my VPN, what does the website see?
Continue reading What does a website see if I am connected on my native IP and then enable my VPN?
I am looking to implement access controls through CA-signed public ssh keys, as described in the article Scalable and secure access with SSH.
I am trying to conceive how our security team will manage this on the CA side. One thing I woul… Continue reading For CA-signed ssh keys, how to see various attributes: principals, identity, serial number, options, validity time, etc
I am creating a web app, and I was wondering if it would be secure to use 100,000 iterations of sha256 for storing passwords? I know that there are algorithms such as scrypt and bcrypt, however, I was wondering if it would be… Continue reading Is using 100,000 iterations of sha256 good enough for password storage?
One of the techniques we cover in the antivirus evasion section of the SANS SEC 504 course is ghost writing. The topic was covered brilliantly by Royce Davis on his blog back in 2012 (https://www.pentestgeek.com/penetration-testing/using-metasm-to-avoid-antivirus-detection-ghost-writing-asm). The workflow he laid out … Continue reading → Continue reading Ghostwriting for Antivirus Evasion in 2018
Between multiple accounts, nicknames and fake names, an individual performing OSINT will often find themselves looking at two pictures and wondering, “Is this the same person?” Sometimes it’s obvious that it is or isn’t the same individual, but it’s not … Continue reading → Continue reading Incorporating Facial Recognition into Your OSINT
On this Thanksgiving day I’m going to write about something near and dear to all our hearts: stuffing. I’m not talking about the delicious pile of bread you’ll have on your plate this afternoon, I’m talking about stuffing payloads into … Continue reading → Continue reading Using Burp Suite’s Collaborator to Find the True IP Address for a .Onion Hidden Service
One question that I get asked a lot when I’m teaching the password cracking section in the SANS SEC504 class is “Once I get a password hash, how do I figure out what type of hash it is?” I mention … Continue reading → Continue reading Resources to Help Identify Password Hash Formats
I am a huge fan of Justin Seitz and his blog. Last holiday season he let me know that pastebin was having a sale on it’s API access, and that he was planning on using it in a future project. … Continue reading → Continue reading Persistent Monitoring on a Budget
When I use Fido UAF for passwordless authentication such as demonstrated at https://playground.hanko.io/login
What stops the guy sat next to me from hitting login at the same time using my email address? Wouldn’t that result… Continue reading Fido UAF timing attack