Attempting to understand security
Recently when talking to some friends, who are still enjoying the art of breaking in by being part of a red team, I was reminded by them how much more difficult initial access has gotten. I decided to write up some old stories in a bit more detail and well; admit that when companies implement Continue reading "Old skool tales on initial access"
The Los Alamos National Laboratory (LANL) has the Advanced Research in Cyber Systems (ARCS) group that provides an intereting data set for cybersecurity purposes. Since cybersecurity datasets are difficult to come by, I decided to play a bit with this dataset. No particular purpose in mind besides just playing and maybe exploring some different technologies Continue reading "Playing with the LANL…
The last post on some notes to myself, made me curious on how easy/difficult it would be to generate a very simple solution to make DuckDB accessible from remote locations. There are probably far better projects out there to remotely access your DuckDB files, but I mainly wanted to have an mTLS first solution, with Continue reading "Observations on AI generated Remote DuckDB via HTTP with mTLS"
This is just a quick post so that I basically don t forget that if I have to do similar things in the future. Also, just in case AI becomes prohibitively expensive, it is nice to just read dumb text :-) Since DuckDB is columnar storage it compresses really really well. Forcing DuckDB to read all Continue reading "[QuickPost] DuckDB NDJSON force all columns"
Because a security decision without friction is just resilience without reality. Since I ve been more involved in blue team operations and the corresponding decision making processes, it has been similar to the experience of waking up, going into the shower, turning on the hot water and being shocked into reality with an avalanche of ice Continue reading "Invisible security requires friction…
I recently came across MindYourPass.io and my curiosity was triggered on how it worked. So I read the website which sounded intruiging, but did not seem to contain a lot of nitty gritty technical details. The website does mention that the solution is based on patented technology. Now this sounds like a nice opportunity to Continue reading "Recon your patents with GenAI?"
This is just a quick memo to myself on how to visually detect security cameras. Written down some commands, thoughts and the weights I generated along the way. With the YOLO library building these types of solutions to visually detect objects seems to be relatively straight forward. Here is an example of it working, having Continue reading "YOLO detect security cameras"
Like most people working in IT or information security or just in general with computers you ll often receive questions on how to protect against phishing attacks, scams or similar attempts to deceive a person. The questions originate not from clients with whom you work professionally, but most often from friends, family other people that Continue reading "Emotions as human detection defence"
Lately, I ve been drawn to do some desk research and limited hands-on testing of physical security measures. I ve written about this subject before, you can find the article here. However, that article was written from the perspective of using social engineering to get into target locations during day time. Which was always lots of fun Continue reading "Random thoughts on physical security…
This is just a quick blog post, mostly as a memo-to-self, to not forget how to parse PowerShell commandlines with C#. Of course as usual, I found a ready made solution when I already had a dirty working version: The fun part is that, like @FuzzySec often says, it runs on OSX as well :) Continue reading "PowerShell cmdline parsing/tokenization"