hidden
CompTia Cloud+: On to Chapter 4. Slow down tiger.
- -A. Buford
- June 25th 📚, 2021
Found myself wanting to finish more of the book and ended up at Chapter #4. Then, I decided to renew a month worth of IT Pro TV to finish up their Cloud+ video series for reinforcement. 'Configuration and Deployment'( 10episodes: 4h 12m ) is completed. Hopefuly I will be prepared enough to take the test by end of July. A lot of items are starting to be overlap material from the Security+ and Network+. I need to slow down a tad to allow my brain to really absorb the material and develop 'interal' questions. More study. Less posting.
Chapter #5 completed. Good amount of new material.
CompTia Cloud+: @pg 103, 33%(ish) done
CompTia Cloud+: @pg 62
Home network topology like whoa
CompTia Cloud+: Here I come.
"Wegmans discloses a data breach, customers information was exposed on the Internet due to a misconfiguration issue."
Takeaways 1. Hackers can't stop won't stop 2. Maybe these supermarket chains are the low hanging fruit 3. Documentation indicates passwords were 'hashed' but no mention of any 'salting' or randomization.
The hashing part really got to me. Considering that any APT will eventually add new hashes to their rainbow tables it creates a 'matter of time' type situation when it comes to security. Most people re-use passwords. Yes there is some confusion regarding what the RockYou2021 password database is and isn't but i'd wager a super-sparkle-penny that 70% of ALL passwords are in there.
Update 6-22-21 : Passwords were salted AND NOT included in breach. I was told to shut my darn mouth and will.
"Report: CVS Health Exposed Search Records Online"
Takeaways 1. Nobody else will protect your data better than you can 2. The databreach atmosphere with regard to politics is still the same. No accountability. 3. Only you can prevent forest fires
A little dev goes a long way
"Google’s June security bulletin addresses 90+ bugs in Android and Pixel devices."
1. Android is one of the most widely used opperating systems and will always be targeted 2. Is it really more dangerous to carry cash vs money on a cell phone? 3. That Google Pixel is very nice.... but it has so many CVEs specifically associated with it.
When you get that little notification to Update or Postpone it is a GREAT idea to update.
"Microsoft June 2021 Patch Tuesday addresses 6 zero-days actively exploited "
1. Wow that is a lot of 0-days for a single patch Tuesday. 50 vulns in total 2. Google's Project Zero really does find a lot of vulns. I don't think that will ever change 3. Privilege esc is still the way to go for bug bounties
Stay updated and stay patched. If it isn't supported then it might not be worth the keep.
"Department of Justice Seizes $2.3 Million in Cryptocurrency Paid to the Ransomware Extortionists Darkside"
1. Cryptocurrency is a matter of national security 2. The US gov is very deeply involved in the cryptocurrency darknet 3. Threat actors, such as Darkside, are going to restructure payment methods 4. Attacks against the national infrastructure will not be taken lightly
I am extremely proud of what our law enforcement agencies were able to accomplish. It really does send a powerful message to others thinking this attack-type would be their next pay day. Great job yall
Today : My 8yr old will learn to make a webpage, HTML
Smarter criminals : The white-hat researcher within
What is research? A gallery story
1. Self hosted
2. Retains EXIF data
3. Automatic/periodic sync w/o manual effort
4. Nice layout of images
4. Compatable with most browsers
I started by doing what every sane IT professional does and checked github to see if there was anything aleady created. There was a ton. None that fit my application specifically though. May of those projects, with good reason, had a lot of security baked in which resulted in many lines of code I didn't want to vet. It really does take a fine comb. The reason security was incorporated in approximately 90% of them was because of the ability to 'upload' by web users. That can obviously be a huge security dilema. Just imagine a threat actor hosting images, with embedded data, on a website that (unknowingly) doubles as a Ransomeware C&C server. That would be a bad time for any host. However, for our scenario, local users will be the only persons needing to add photos to our galleries. Right? I decided to narrow the scope to something more simple and came up with a PHP based idea.
Once I got the functionality and layout down on a whiteboard I went online for PHP code syntax help. This is 3 hours down the rabbit hole later. While doing so I realized (YET AGAIN!!!!) this was no new idea and that W.S. Toh created something over at Code-boxx that solved the problem.... a few months ago. I simply place my images, from any device on the LAN, into a shared network folder. Every XX minutes, via a cronjob, the folder is synced to a dev env (Example from similar deprecated script rsync -avzhe ssh /mnt/91337b30-484d-472b-90ec-c193e34b8893/public_nas/farm/2g.dsm.ecu.removal/xxxx.buf0rd.com.syncd.gallery/ user@XXX.buf0rd.com:XXXXXXXXXXX). In the dev env is a cronjob to sync with the cloud provider (after running various checks).
TDLR; Researching any topic can end up taking up a ton of time. That is why most organizations hire externally. They simply do not have the bandwidth to teach internal employees the skillsets needed to allow an internal empoyee to research, design, and implement a new 'technology'.
Also, the website has new image 'Content' galleries
Own YOUR SERVER
Why don't you post more often
A child's brain is amazing
Pronterface and Pronsole.. because people are lazy
- -A. Buford
- April 27th 🤓, 2021
I decided to dig a little deeper into this whole 3d printing stuff. After a long time avoiding.. I installed Pronterface/Pronsole /Printrun.
Printrun is a full suite of host interfaces for 3D printers and CNC, consisting of: Pronterface, a fully-featured GUI host; Pronsole, an interactive command line host .
It is a suite that pretty much allows you to do all things you would normally do on a 3d printer without actually being there.
Installation was very straight forward on an Ubuntu VM via sudo apt-get install pronterface -y
Once installed you have the option of a GUI (Pronterface) or a CLI (Pronsole). TBH pronsole seems a lot more promising. The possibilities are endless. All that is needed is a microUSB to USB adapter and you should be good to make.
Dear YouTube, you played yourself
- -A. Buford
- April 25th 🏎️, 2021
This morning I woke up to a content take down notice from YouTube.
Our team has reviewed your content, and, unfortunately, we think it violates our harmful and dangerous policy. We've removed the following content from YouTube: Video: Cracking MD5 hash with John The Ripper JTR
The video was part of a security research project I had been apart of in 2016(ish). For some reason, although outdated, YT decided to give me a warning. The interesting part is that similar videos, even those i reported for being over the top, still remain. So personally I feel like there is ONCE AGAIN some personal bias involved.
Now, how did they play themselves? I get a good amount of my YouTube traffic from THIS WEBSITE. YT was just convenient. So, i'll just post content here first. No biggie. Videos being copied as we speak.
Update 4-25-21, Late night: I played myself? 11gigs of video. I gotta figure out a creative db option and frontend. It'll be housed here once finished.
Installed Petio for the PLEX Server
Chicago Virtual Cybersecurity Summit 2021
Image Galleries for all.
BalBot v1.00 | Raspberry PI to hotspot internet tetherer
#!/bin/bash
ifconfig eth1 down
ifconfig eth0 down
iptables -f
# Enable IPv4 and IPv6 forwarding (feature):
sudo sysctl net.ipv4.ip_forward=1
sysctl net.ipv6.conf.default.forwarding=1
sysctl net.ipv6.conf.all.forwarding=1
# Assign IP address to eth1:
ip link set up dev eth1
ip addr add 10.42.0.1/24 dev eth1
ip link set up dev eth0
ip addr add 10.43.0.1/24 dev eth0
# Packets forwarding wlan0 -- eth1:
iptables -t nat -A POSTROUTING -o wlan0 -j MASQUERADE
iptables -A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -i eth1 -o wlan0 -j ACCEPT
iptables -A FORWARD -i eth0 -o wlan0 -j ACCEPT
@reboot with a slight delay (sleep 15;)
The power of plants.. Not those kind
Trace Labs OSINT QEMU/KVM Installation video created!
SmartThings via CLI
- -A. Buford
- April 8rd 🦝, 2021
What you call a person with hands stuck to the floor? I'm not sure and it's not related.
I got tired of using either a tablet or cell phone to command switches and accesories on the home smartthings lan. So. I created a Samsung SmartThings CLI control app to do it from the command cline interface. Slow down. I didnt code it. Just modified it. The playground has just grown! Think about it. I can set things on cronjobs for timers. I can now flip switches based on ANY condition! It only works sometimes though. Go figure. I'll get it sorted.
Credits: Copyright 2015 Richard L. Lynch rich@richlynch.com
