Dev and Security Walkthroughs

I did a presentation on Internet Privacy at work. I want to document it here so I don't forget about it. Which I would. The presentation went okay. I forgot the words "sidewalk", "parking garage", "convenience", and a few others. I have a tendency to forget words while talking. Sometimes I can cover it up. I think this problem would go away if I said more than ~200-1000 words a day. My sentences can be said in the wrong order too. I remember forgetting words mid-speech around 11 years old. The act of presenting was meh personally. I learned a few new things. I can't imagine doing these every month. Once or twice a year sounds good to me. Link to PDF Presentation

Background I signed up for Cisco 1 and 2 this Fall semester. I just finished Cisco 2. David Durkee the instructor offered to teach the Tri-C team during Midwest CCDC. He barged into our room and said something like "hey you guys need help! Tri-C isn't too far away from Lakeland Community College. You should take some classes with me! I know my stuff". It's not everyday a networking professor barges into the room and offers to teach you. I couldn't pass this offer up. Also note: We left our very knowledgeable Cisco/Windows/Linux team-member Mohammad Ali in Cleveland. Our router and switch would have been better protected with his insight. We had no Network Admin during the competition. Area Lakeland Community College is far away. Its located on the East side of Cleveland in Kirkland. I live in Brunswick. It takes 35 minutes to get there from work and one hour to get home. The area is very nice! I used to live in Willoughby when I was a little kid. It was nic...

I passed my Salesforce PD1 exam on July 9. The PD1 was my first Salesforce exam. Here are a few observations. Time I studied for a total of seven days. I wanted to get the cert out of the way. Seven days is possible. I went to Starbucks on Saturday and Sunday and studied too. I wanted to study for the Admin I after PD1 but I was completely burned out. I couldn't study anymore multiple choice questions! Resources I used Quizlet, FocusOnForce, lynda.com, and a developer console. FocusOnForce was the best resource. Difficulty This exam is rough. I'd say test takers automatically lose 20%-30% of the questions. Some questions are esoteric things you will not encounter on projects or while studying for this exam. It doesn't matter if you study for 7 days or 5 weeks, you'd probably get the same score anyways. Opinion Salesforce could do better. As one coworker put it "the best way to determine someone's ability to code is by ambiguous multiple choice question...

Backstory I’ve seen blog posts of interns writing reviews for big tech companies like Amazon and Microsoft. I thought Hurricane Labs deserved one too. This link describes what HL does: Hurricane Labs. I was the only person left without an internship my sophomore year. A group of Baldwin Wallace University (BW) students and I were at the BSides security conference. They were all working at Hurricane Labs, Secure State, and other places. I was the odd one out working at Walmart. I felt envious but reminded myself these students were juniors and I was still a sophomore. I was very late on the summer internship game. I didn’t want to take on an internship until I felt ready. I thought if I did a bad job, I would block out other women. If I did a terrible job I wouldn’t just hurt myself, I’d hurt all the future women trying to get a job at the same company. If a company has repeated bad experiences with a group of people, I think they’d just stop hiring them. This is what I thought back ...

Information: Name: HackDay Albania 2016 VM Creator: R-73eN Time it took me: 10+ hours. I dropped this one in November and picked it back up today. I was having trouble getting into the mysql database because of my shell. However when I tried again, I had no issues. Rating: 7/10 Recommend: Yep. This VM will help you understand the /etc/passwd file and what linux uses as hashes better. Also good for SQL Injection. root@kali:~# nmap 10.0.2.6 -A -p 0-9000 PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 7.2p2 Ubuntu 4ubuntu2.1 (Ubuntu Linux; protocol 2.0) 8008/tcp open http Apache httpd 2.4.18 ((Ubuntu)) | http-robots.txt: 26 disallowed entries (15 shown) | /rkfpuzrahngvat/ /slgqvasbiohwbu/ /tmhrwbtcjpixcv/ | /vojtydvelrkzex/ /wpkuzewfmslafy/ /xqlvafxgntmbgz/ /yrmwbgyhouncha/ | /zsnxchzipvodib/ /atoydiajqwpejc/ /bupzejbkrxqfkd/ /cvqafkclsyrgle/ |_/unisxcudkqjydw/ /dwrbgldmtzshmf/ /exschmenuating/ /fytdinfovbujoh/ |_http-server-header: Apache/2.4.18 (...

Information: Name: covfefe: 1 Author: Tim Kent Rating: 9.5/10 Recommend: Yes. Great experience cracking SSH private keys and learning simple buffer overflow exploits. $ nmap 10.0.2.8 -p 0-65535 Nmap scan report for 10.0.2.8 Host is up (0.00044s latency). Not shown: 65533 closed ports PORT STATE SERVICE 22/tcp open ssh 80/tcp open http 31337/tcp open Elite Lets visit the 31337 port. http://10.0.2.8:31337/robots.txt User-agent: * Disallow: /.bashrc Disallow /.profile Disallow /taxes We find the first flag in the the /taxes directory. It looks like were in someones home directory... what a bad place to put an Apache web root. So after dirbing the directory with fuzzdb (https://github.com/fuzzdb-project/fuzzdb) raft-large-files.txt, we find out the .ssh directory exists. Copy the id_rsa private key and id_rsa.pub key. Put both of those files in your own ~/.ssh directory. This will help us SSH into the server. Use ssh2john to convert the id_rsa k...

Information: Name: Bullodog Author: Nick Frichette Link: https://www.vulnhub.com/entry/bulldog-1,211/ Time it took me: 6-7 hours. Rating: 7/10. It was alright. The hard part wasn't getting a shell on the box, but the privilege escalation part. The good thing about this box is it was my first time interacting with Django. I also learned about the strings command to print out string information in binaries. Recommend: Yep. $ nmap -A 10.0.2.7 -p 0-10000 Nmap scan report for 10.0.2.7 Host is up (0.00039s latency). Not shown: 9998 closed ports PORT STATE SERVICE VERSION 23/tcp open ssh OpenSSH 7.2p2 Ubuntu 4ubuntu2.2 (Ubuntu Linux; protocol 2.0) 80/tcp open http WSGIServer 0.1 (Python 2.7.12) 8080/tcp open http WSGIServer 0.1 (Python 2.7.12) SSH is enabled on port 23. Thats good to know. We see the Bulldog site is utilizing a custom WSGI Server. Lets spider it with dirb. $ dirb http://10.0.2.7/ ---- Scanning URL: http://10.0.2.7/ ---- ==>...