Sequel on Hack the Box Write-up

Quick little mysql vulnerability. A lession in misconfiguration. Executive Summary The target machine had an open database port which also had no password to access the service. This was a Security Misconfiguration. Methodology To begin, the target machine was enumerated using nmap. The output of nmap will show the open ports and potentially try to identify services of a target machine. nmap -sV -sC $ip The variable $ip was substituted for the ip address of the target machine.

January 18, 2022 - 9 minutes read

Vulnuniversity on Try Hack Me Write-up

This is a write-up of a fun box on Try Hack Me. I hope this can be useful to anyone who ran into issues with this box, especially the privilege escalation. One of the overlooked parts of penetration testing is report writing. I’m working on a new system using emacs org-mode as the basis for write-ups and pentest reporting. In the future, I’ll post up my notes on this system, as I am currently ironing out the bugs.

January 7, 2022 - 3 minutes read

Use Ranger and Sed to Quickly Add Filetags to Org-roam files

Here is how I used ranger to add a filetag to org files in a fast and efficient way. I used this when I had to retroactively tag a bunch of org-roam files after a decision to split up my roam files in a different way. It makes adding a tag easy and fast! I modified hundreds of files in just a few minutes, files that I could not pragmatically modify due to no consistency in their content.

December 21, 2021 - 6 minutes read

Migrate Windows Shares Fast

In this post, we’re going to learn how to migrate network shares using Windows command prompt commands for fast share migration. Often the data in Windows shares outgrow the underlying hard disk space and need to be migrated to new, larger hard drives. This post will show how to do just that, FAST! This is for modern Windows versions with modern Powershell, like Windows 10 and Server 2016 and above. Might work on earlier version (certainly the CMD commands will), but I have not tested it on End of Life versions (will probably work on 2012 R2).

December 15, 2021 - 5 minutes read

Enhance Wordpress Security with a Twenty Twenty-One Child Theme

You can find the code for this on Github at funcsec/twentytwentyone-child The issue One of the issues that I notice in maintaining and supporting Wordpress sites is that plug-ins and themes not only are they chronically out of date, but are often no longer supported. It’s a common problem. This leaves clients stuck on an old, potentially insecure version of wordpress because they’re theme cannot be updated, and their theme is bundled with a score of updates that also can no longer be updated.

Posts

List of Posts