The Random Adventure That Is Life (RATIL)

The Random Adventure That Is Life (RATIL)

Sign in Subscribe

Quick and Dirty IP Lookout In Microsoft Sentinel

Quick and Dirty IP Lookout In Microsoft Sentinel

I had a need to determine if IPs in Microsoft Sentinel events were from our VPN block or not. Sentinel does not provide any native way to look up WHOIS information for an IP, so I had to do this in a quick and dirty fashion. Get the IP Ranges

Hack the Box: Inject

Hack the Box: Inject

Enumeration Browsing to the webpage on port 8080 lands at a "Zodd Cloud" product page. There seems to be signup and sign in functionality that will be worth exploring. None of the links work except signup, which lands at an Under Construction page. Oh, but there is an Upload link

Streaming Logs From Azure Event Grid to Log Analytics Workspace

Streaming Logs From Azure Event Grid to Log Analytics Workspace

I use Azure Sentinel and the way that Sentinel is able to analyze logs is through a Log Analytics Workspace. Some third-party platforms allow log streaming to Event Grid. So I needed a way to get my logs from Event Grid into the Log Analytics workspace. You might think this

Maytag 5000 Dryer Repair

Maytag 5000 Dryer Repair

DISCLAIMER: I am not a repair professional, just a slightly handy homeowner. We have a Maytag 5000 series washer and dryer in our house that were left by the previous owners. DO NOT ever buy these pieces of junk. I am done with Maytag and won't ever buy another set

Broken Azure

I saw this link posted on LinkedIn with a collection of free cloud training resources and decided to try my hand at some of the Azure ones given my relative lack of familiarity with Azure versus GCP and AWS. Kind of going in order, I decided to start with Secura's

Hack the Box: Busqueda

Hack the Box: Busqueda

Initial Recon Conduct typical initial portscan └─$ nmap 10.10.11.208 Starting Nmap 7.93 ( https://nmap.org ) at 2023-04-26 11:13 EDT Nmap scan report for 10.10.11.208 Host is up (0.089s latency). Not shown: 998 closed tcp ports (conn-refused) PORT STATE SERVICE 22/tcp open

Searching for a Job

Searching for a Job

Making a job change is often a serious life event. Balancing the needs of your current job while prioritizing your happiness, mental health, and financial requirements can be rough. I recently left my job as a Technical Director at Praetorian to take a new role as a Senior Detection and

Hack The Box: Precious

Hack The Box: Precious

Initial Enumeration A simple NMAP scan to just get the lay of the land initially. Only two ports appear to be open. SSH appears to allow for password auth, and the web port hosts a page that allegedly converts pages to PDFs. Brute forcing additional pages on the web server

Toniebox Tonies Duration Python Script

Toniebox Tonies Duration Python Script

Maximize your value on Tonie figurines with this sorted list of Tonie durations.

Vivint Smart Garage Auto Close

Vivint Smart Garage Auto Close

My car recently got stolen out of my garage so I wrote a script to automatically close the garage whenever both of our phones are not connected to the home Wifi. Thanks to Nate K Spencer and this repository for the Vivint API integration needed to make this possible: https:

Bulk Download Photos From Procare

Bulk Download Photos From Procare

Our son's daycare/preschool uses Procare to track attendance and send info about the school including pictures of the kids during the day. As he moved to a new school for Kindergarten, we wanted to make sure that we had all his photos from the app. Too bad the app

Book Review - Immune: A Journey Into The Mysterious System That Keeps You Alive

Book Review - Immune: A Journey Into The Mysterious System That Keeps You Alive

I just finished reading Immune by Philip Dettmer (the creator of Kurzgesagt-In A Nutshell). While I ordered this book back around Christmas time and was one of the first people to get the book, I had only read 1 or 2 chapters of it up until this week when I

Paddling the Colorado River

Paddling the Colorado River

After having rented paddle boards for years, I finally bought an inflatable one and brought it with me on my annual work trip to Las Vegas. After researching the area, I decided to attempt to paddle up the Colorado River below Hoover Dam and see how far I could make

When do you feel happiest?

When do you feel happiest?

I have had writer's block lately. Luckily Mrs. Steen bought the Best Self Ultimate Deck Collection, which includes a "Wordsmith" pack for just such an occasion. The first card I pull out? Yup, that title ^^^ right there. When vs. What vs. Where When you usually see this question, the phrasing

Previse

NMAP shows that ports 80 and 22 are open. The site at port 80 is a login page to a File Storage site. Running GoBuster against the site reveals several additional pages that although they redirect back to the main login page, do indeed have content as well. Specifically: * accounts.

Return To Hack The Box - BountyHunter

Return To Hack The Box - BountyHunter

After a several year hiatus from Hack The Box, I decided to jump back in and take a look. Here is the write-up for Bounty Hunter BountyHunter Initial nmap scan indicates ports 22 and 80 are open. Browsing the page on port 80, there is a "Portal" section that indicates

Stadia Firewall Rules

Stadia Firewall Rules

Google was running a deal that if you bought a game on Stadia you would get a free controller and Chromecast Ultra (what they call the Premier Edition). I was excited for this as this would round out my gaming capabilities to let me game on all of my screens.

Camping Types

There are probably hundreds of articles on this across the internet, this is just my take. There are 3 major categories of camping to me each with a few sub-categories therein: * Campground Camping * Tent * Car * Trailer/RV * Dispersed Camping * Tent * Car * Trailer/RV * Backpacking * Wilderness * Designated Site For all options,

Kids' and Wife's First Backpacking Trip

Kids' and Wife's First Backpacking Trip

If you know me or have read this blog, then you know that I like backpacking. Last year I tried to plan a backpacking trip for the kids into Rocky Mountain National Park but we got rained out by a storm that ended up being a Derecho Storm [https://en.

Family Road Trip 2021

Family Road Trip 2021

I had to be in Las Vegas for work for a few weeks. Since I was planning to drive anyways, we decided to make a road trip out of it and visit several National Parks along the way and finishing the trip off with a couple of nights in Vegas.

Head Against Wall: Odd Bootable USB Behavior

Head Against Wall: Odd Bootable USB Behavior

So for work, we provision devices to send to clients using a bootable USB Ubuntu installer with a bunch of custom options and additional software. This all happens without hiccups generally...until this week, when I needed to clone the drive for someone else. After much weeping and gnashing of

On Empathy

Empathy, Empathy, Empathy! All of this, all sides, all people. Empathy is the key and what we seem to be losing. I like to think I have great empathy for the disenfranchised but I fail spectacularly at demonstrating empathy for those whose political views run against my own and that

Lost Creek Wilderness Loop

Lost Creek Wilderness Loop

I was getting the itch to do a backpacking trip. Given the pandemic situation I decided to stick close to home and went with the Lost Creek Wilderness Loop. Coming from Denver, the Wigwam Trailhead was the closest entry point. However, that trailhead has about a 3.7 mile spur

Car Camping Load Out

Car Camping Load Out

I have a vested interested in making car camping as easy and comfortable as possible: 1. If I am going alone with my son, I have to ensure I am able to handle the whole trip solo and in such a way that a 3-year-old can enjoy it. That means

SSH Access With Cloudflare Argo and Access

SSH Access With Cloudflare Argo and Access

Although Cloudflare generally has pretty good documentation. In this specific case, the documentation is spread over multiple pages and actually just wrong in a couple spots. I am going to try to consolidate this process here. My goal here was to enable programmatic SSH access to an arbitrary number of