computers pfSense With CenturyLink 1GB Fiber We just recently moved into a neighborhood that offers CenturyLink 1GB fiber into the house. I mistakenly though the change would be as simple as plugging in my current setup to whatever modem they provided. Turns out that is not the case and that a little more work is required.
computers Hack The Box: Irked Irked: Retired If you are interested in learning more about penetration testing, Hack the Box is a great way to get your feet wet in a legal and well built environment. Head over to hackthebox.eu [https://hackthebox.eu] to get started. Enumeration My initial enumeration returned a handful of
computers pfSense Insights This post will be updated as I find out interesting tidbits while working with my pfSense. Usually this will be getting something in the house to work as expected with out opening up the firewall to everything. Amazon Shopping App UPDATE: The solution listed below no longer works. The Amazon
computers Verifying Slack Slash Commands in Google Cloud Functions Recently Slack moved from using "Validation Tokens" to validate that Slash Command requests were actually from Slack to signing the requests with a "Client Signing Secret". This seems like a simple change but turned out to be a huge pain in the butt to figure out.
computers SANS Holiday Hack 2018 I have to be honest, life is just too busy this year for me to actually write a full report in the context of the story. Suffice it to say, I really enjoyed this year's challenge, much better than last year in terms of not having to actually
computers Hack The Box: Jerry Jerry: Retired 17 November 2018 If you are interested in learning more about penetration testing, Hack the Box is a great way to get your feet wet in a legal and well built environment. Head over to hackthebox.eu [https://hackthebox.eu] to get started. This box was almost too
computers Holiday Theming Update: Added more to the commandline zsh config to apply specific emoji throughout the year. I have been playing around with a few theme options lately and the holidays got me in the spirit to adjust appropriately. Specifically, my command line theme and my Razer keyboard theme. Command Line After
computers Hack The Box: DevOops DevOops: Retired 13 October 2018 If you are interested in learning more about penetration testing, Hack the Box is a great way to get your feet wet in a legal and well built environment. Head over to hackthebox.eu [https://hackthebox.eu] to get started. Been a while since I
computers Server Migration I had a need to migrate this server to a different provider for cost reasons. This was also a good chance to document my process since I did NOT do that last time. I ended up going with Digital Ocean [https://www.digitalocean.com/].Amazon [https://aws.amazon.com/lightsail/
computers Reducing Image Sizes For Entire Blog I am lazy and when I add photos to this blog I do not do ANY resizing or adjustments. Well, over time, I have realized that having multiple multi-Megabyte size images on a page is not great for load speeds. So I looked for a way to reduce all of
computers theHarvester For Open Source Recon I was using theHarvester the other day and had to do a little extra work to get the data I wanted out of the results. There are plenty of posts out there about how excatly to use theHarvester so I am not covering that. The current version from theHarvester GitHub
computers InsightVM (Nexpose) Slack Bot Link to the repo at the bottom... Precursor to this post: https://ratil.life/slackbots-for-fun-and-profit/ [https://ratil.life/slackbots-for-fun-and-profit/] A few months back I decided to find a way to lighten the load of ad hoc vulnerability scanning requests by our system owners. One of our biggest time sucks was
computers Timestamp Keyboard Shortcut In gedit I do not know why this was such a hard problem to find a solution to given that the solution I arrived at was extremely simple. On multiple teams I work with, we have a need to take timestamped notes of our actions. Often we are operating on locked down
computers Testing With Python: First-Timer Perspective Certainly nothing groundbreaking here, just my experience diving into the world of code testing. Code Testing Any book, blog, or article about software development is going to tell you that you should always write tests for your code. Even more so, you should write the tests before you ever even
computers Hack The Box - Bashed Bashed: Retired 28 April 2018 If you are interested in learning more about penetration testing, Hack the Box is a great way to get your feet wet in a legal and well built environment. Head over to hackthebox.eu [https://hackthebox.eu] to get started. Bashed was one of the
computers SANS SEC660 - Advanced Penetration Testing, Exploit Writing, and Ethical Hacking UPDATE: I took my exam and PASSED! I felt that the actual exam was a bit harder than the practice tests but I also get my best score out of the three. The material covered in class is great but you really have to have read the text in the
computers Hack The Box - Sense Sense: Retired 24 March 2018 If you are interested in learning more about penetration testing, Hack the Box is a great way to get your feet wet in a legal and well built environment. Head over to hackthebox.eu [https://hackthebox.eu] to get started. Sense was an easier box
computers Slackbots for Fun and Profit This is the general process/flow for creating Slack integrations, nothing groundbreaking here, just wanting to consolidate the info that I used when building bots. In the future (once I get approval) I will publish the details of a bot in Ruby and a slash command in Python. Bot/Slash
computers New NAS and Backup Strategy I finally got a NAS (Synology DS216se) for the house to keep our photos and other important files safe. I was starting to get really nervous about losing data both on the home computer and this server as well. The new NAS required a good backup strategy. I really wanted
computers Cloudflare - Free Tier While researching ways to improve the speed of this website, I recently found out that Cloudflare offers a free tier of service to personal websites and blogs. Everything I read made this seem like a pretty easy move and the benefits of increased security, speed, and DOS protection seemed like
computers Hack The Box - Mirai Mirai: Retired 10 Feb 2018 If you are interested in learning more about penetration testing, Hack the Box is a great way to get your feet wet in a legal and well built environment. Head over to hackthebox.eu [https://hackthebox.eu] to get started. Mirai was certainly one of
computers Hack The Box - Solidstate SolidState: Retired 27 Jan 2018 If you are interested in learning more about penetration testing, Hack the Box is a great way to get your feet wet in a legal and well built environment. Head over to hackthebox.eu [https://hackthebox.eu] to get started. Solidstate was extremely similar to
sans SANS Holiday Hack 2017 - Wintered This year's Holiday Hack did not disappoint. Using vulnerabilities and attacks that dominated the headlines this year made the event even more fun.
computers First Useful PowerShell Script: PuTTY to SSH Config I have done a little bit of PowerShell work in the past but mostly just training exercises and modifying existing stuff. With the release of Bash for Windows and the recent announcement that Microsoft will be bringing OpenSSH to Windows [https://www.techspot.com/news/72313-native-openssh-coming-windows-10.html] I figured this
computers Metasploitable3 CTF Rapid7 just wrapped up the second of their Metsploitable3 CTFs, this time for the Linux version of the intentionally vulnerable OS that both beginner and advanced hackers can hone their skills on. They only allowed 500 participants/teams worldwide. I had a lot of free time the week of the
