Human prompt: “write an article for my penetration testing website” Human paragraph: I need content for my website, not just for you, but for me. See, I won’t get good Search Engine Optimization (SEO) results unless I have content on my site. But guess what? The content I write is too abstract and technical for […]
Unveiling Vulnerabilities: The Power of Penetration Testing Read More »
The OWASP Top Ten is a widely recognized document that highlights the most critical security risks in web applications. It serves as a guide for developers, security professionals, and organizations to prioritize and address common vulnerabilities. Designed by the Open Web Application Security Project (OWASP), the Top Ten provides a consolidated and accessible list of
Fallacy of the OWASP Top 10 Read More »
The Power of DNS Sinkhole Devices: Exploring the Benefits of PiHole In today’s digital landscape, online security is a top concern for individuals and organizations alike. As cyber threats continue to evolve, implementing robust defense mechanisms becomes essential. One such tool that has gained popularity is the DNS sinkhole device, with PiHole being a notable
DNS Sinkholing for ‘security’ Read More »
The blog post accompanies my public conference talks on this topic. Slides are available at the bottom. One thing I learned from doing this talk is that a surprisingly high number of InfoSec professionals believe that bypassing EDR is not possible or is an exception. It should be more common knowledge that security tools can
Evading EDR by DLL Sideloading in C# Read More »
What I’ll Cover What The Course Is How OSEP compares to OSCP Similarities and differences The Course Review Who I am, and who this is aimed for My study plan and time involved PDF videos, exercises and extra miles Final Materials “Walkthrough” of how to use the Challenge labs Challenge Lab Exercises Challenge Lab methodology
OSEP Review – The Experienced Penetration Tester Read More »
Spiceworks Annual IT Conference ” https://www.spiceworks.com/spiceworld/ “ For the past few years, I’ve been going to SpiceWorld and took the opportunity this year to present. My session was focused around “practical hacking”, as in, the simple flaws that I’m going to search for in your network and how I would take advantage of them to
Spiceworld Virtual 2020 Practical Hacking Read More »
Blog Preface – “Windows Kits” While running through some MITRE techniques, I happened upon the ADK tools and SDK tools and found a great collection of programs used for development, debugging, and administration. It just so happens, they’re also great for Red Teaming. Many of them are Digitally Signed by Microsoft, making them a great
Red Team – Windows Kits – CDB.exe Read More »
Blog Preface – “Windows Kits” While running through some MITRE techniques, I happened upon the ADK tools and SDK tools and found a great collection of programs used for development, debugging, and administration. It just so happens, they’re also great for Red Teaming. Many of them are Digitally Signed by Microsoft, making them a great
Red Team – Windows Kits – ADPlus.exe Read More »
This is a review of my OSCP experience. I registered in late 2018 and received my OSCP in May of 2019 with one exam attempt. This review is coming out in 2020. The Offensive Security Certified Professional is a golden standard in the CyberSecurity and Penetration Testing community. Its known for it’s grueling 24 hour
This is my review of the OSWP course material. I passed this certification in late 2019. The Offensive Security Wireless Professional is a certification course and exam that tests your knowledge around wireless penetration testing. Offensive Security is easily my favorite certification vendor simply because of their exam approach. The entirely practical exam means that
