Posts

Retrospective on the OSCP Exam

-
Image
10:00am (ish) - I received the email - Here's your OSCP exam packet and instructions. What would ensue would be hours upon hours of laser focus and excitement. The Beginning - My Background I had always wanted to sit for the OSCP exam, and thanks to my company's training policy, I was able to take that leap.  I had dabbled in security as a hobby back in my earlier years, and was a developer for most of my professional career before making the switch to a cyber-security warrior (which I have been in a security role for 2 years now).  For fun, I had configured a training lab at my company to go through VulnHub VMs and encouraged everyone in my department (and those in others) to try them out if they had free time. The Months of Training - Blood, Sweat, and Maybe Some Tears When one signs up for the OSCP/PWK course , the decision of "how much time is enough time" is the most important question to ask yourself.  Do you have other obligations that will get in the...
Post a Comment
Read more

Prepping for OSCP: Walkthrough for LazySysAdmin

-
Image
Prepping for OSCP: Walkthrough for LazySysAdmin With a request in for approval to start my OSCP training, I decided I should probably get started on some write-ups for the VulnHub VMs I've done. So without further ado, here is my guide for how I rooted LazySysAdmin: Discovery The first step to any engagement, is to know in which network you will be working.  To figure this out, I ran an ifconfig to see which IP address I pulled from DHCP: Figure 1 IP Address of Attacking Machine So it looks like I’ll be working in the 192.168.56.0/24 subnet.  With this information in hand, I could look for other hosts on this subnet using netdiscover: Figure 2 Netdiscover Results with Hosts As you can see in Figure 2, there are a couple of hosts on the network.  192.168.56.1 is the gateway, with 192.168.56.100 being the DHCP server and 192.168.56.101 being our target machine. Enumeration With the network mapped out, it was time to see what was open on our ta...
Post a Comment
Read more

DerbyCon 7.0 & Tyler Hudak's Intro to Malware Analysis

-
Image
Copyright DerbyCon 2017 DerbyCon VII: Legacy DerbyCon VII: Legacy just ended, and I have to say, it surpassed last year's experience.  Now, I'm pretty new to the professional infosec world having just accepted my current job in August of 2016.  Like most people in infosec will claim, I am an introvert, so meeting people is a rather daunting task.  One of the things I like to do being new to the professional infosec world is follow a few of the more prominent people on Twitter.  This led me to following Lesley ( @hacks4pancakes ), as well as Dave Kennedy ( @HackingDave ), who is the founder of DerbyCon.  Lesley posted a tweet asking for volunteers for the Root Beer Float social that took place on Saturday.  Determined to meet more people, I volunteered, and met a great group of individuals. The DerbyCon 7.0 Root Beer Float Crew! I even gathered up the courage to meet Dave, who is a wonderful, humble, and caring ind...
Post a Comment
Read more