The Contractor 🏴‍☠️🧯 (Page 2)

Juri.

what laws allow what government departments legal access to information on the end of an IP Address, it's called Juri. after Jurisdiction - https://juri.host/

Sunsetting Domains

What to do when you no longer need a domain

Amature.

The wrong people in the room when the decisions where made to reduce citizen data security.

Threat Modeling ? Not My Cup of Tea...

Threat Modeling is not everyone's cup of tea, but let's threat model everyone's cup of tea.

The BYOD Post.

BYOD Problem, options.

Files, Folders & Fun (revisited)

Playing with folder resolution to build a better pretext

The Cost of Expiration

Who needs to know when a domain has expired ? It Depends, and it Deepens.

File Folding.

File Folding is a technique that moves a file into hex, and that hex is broken into folder file names in a fashion that can be reconstructed.

Untrusted Wi-Fi Networks, Advice for All.

Nine words unpacked.

Data-bouncing

Data-Bouncing - The art of indirect exfiltration. Using & Abusing Trusted Domains as a 2nd Order Transport.

Securing Ghost Blog Authentication with Cloudflare's ZeroTrust Access Policy

Random

How to implement MFA in Ghost Blog with Cloudflare's Zerotrust Access Policy.

Three-Word Password Attacks

OffSec

The idea behind three word passwords as a concept is in my opinion a nice nudge in the right direction, In a perfect world, a passphase or a sentence

Get TI from historical breach data?

OSINT

We can do more with breach data.

Identity Inheritance via expired domains

Exploitation

I wonder if any of these leaked email address domains are expired, and I wonder if I can buy them and inherit the identities associated with them via password resets

Inference.

OSINT

The way we leak information will eventually change...

'ExpLoading'

Exploitation

If you have ever dismissed a search order binary plant attack because the folder from where it takes place doesn’t allow for writes without elevation?

Bigger Benefits of Password Cracking

EntSec

Visibility everywhere yeilds a better understanding of work working, or work needing more support or new approaches. this is that for AD passwords en-mass.

Paying or Preventing Ransom Payments

Random

Don't make criminals of victims, think a little harder on this problem.

DNS Security TXT

Ideas

DNS Security TXT record A method to hold security contact signposting from an authoritative position - from Casey Ellis & myself https://dnssecuritytxt.org/?tc

Vertical Vulnerability Managment

InfoSec

Vulnerabilities are technology, security and risk vertical, as should be the management.

Posts