A place to store my thoughts on cybersecurity, IT, and computer-related research.
My grandma isn’t on Facebook, Instagram, Twitter, Reddit, or the fediverse. But she isn’t completely offline. She has a smart phone, but she uses it to check the weather, text friends and family, and make phone calls. She is purposeful with her online usage. The closest thing she has to social interaction online is that she reads her close friend’s blog. With the rest of her free time, she ga...
If you know me, you know that I have serious, unresolved trust issues. Not so much with people, but with machines. As soon as I hand off a VM or physical machine to someone, I assume the data on that machine is no longer fully mine even if I went to great lengths to secure the data at rest. There has to be a plan if the data (API credentials) on that machine are compromised and it shouldn’t in...
Picture this: You are a developer working on your favorite project. You love git and think anyone who dares to use a subpar version control system like mercurial or subversion should reconsider their stance before even looking in your general direction. You write pre-commit hooks in your down time to autopep8 every last file in your project. The last time you Googled “git how to revert commit”...
pwn / nooopster Solved with help from: Will Green (Ducky) Challenge Description Sharing files like its 1999. Connect to my network with OpenVPN. nooopster.challenges.ooo 1999 Walkthrough: We’re provided an OpenVPN config file and key: dev tun secret openvpn.shared.key ifconfig 192.168.5.2 192.168.5.1 remote nooopster.challenges.ooo 1999 tcp-client verb 3 Initially the config file conta...
web / cache Solved with help from: Will Green (Ducky) Challenge Description Arrogant Shou thinks Django is the worst web framework and decided to use it like Flask. To support some business logics, he developed some middlewares and added to the Flask-ish Django. One recent web app he developed with this is to display flag to admins. Help us retrieve the flag :) This challenge requires user ...