John Carroll - The Contractor 🏴‍☠️🧯 (Page 3)

DNS Stewardship

EntSec

DNS Stewardship, the art of controlling internet facing projects from conception.

This post is as much as an internal sit-rep as it is one for others to witness, share and challenge, I'm trying to understand the Top10's value eleven years on, the current top10 (2021) is in draft and open for comment, I've put my comments here, as well as the opening to this conversation on github

A Method for identifying .onion associated IP addresses

OSINT

This post is in theory, sound, however executing it would take real collaboration that probably doesn't exist and due to the benefits of tor to certain operations is going to be counterproductive,but, something to think about all the same

Imposter.

InfoSec

Thoughts on Imposter Syndrome, In summation; Imposter Syndrome is the consequence of poor support.

Publicker.

Defence

Cross-referencing acquired credentials against public known, known bad credentials in a bid to really hit home the cultural change required. or just fully breaking down a target.

Privacy Engineering ?

Privacy

Grammarly taking more data than it should, a exploration and musings over the idea of privacy engineering in conjunction with application security assessments

Active Directory Network Agents and not-good deployments

Exploitation

That’s a Nice Palo-Alto Firewall Forescout Active Directory Integrated Network Appliance you have ther