Dev and Security Walkthroughs

Introduction I gave a tip for a missing minor in Toledo. The URL went down for them. Rough Explanation This person had a more common last name. I used a license plate to verify the social media was in Ohio. I then used a shirt to identify Toledo. I then found an Advertisement with a phone number. I found the company they worked at. So I forwarded the Ad + Company to the Toledo police email. Basically one thing led to another. I was following the trail. Things I learned 1. When dealing with someone with a common name, look for license plates in photos. This will narrow down if your on the right path or not. 2. Once I got to Ohio I thought, OK how do I narrow down this person is from Toledo? I found a photo with initials on a shirt and connected it to Toledo. 3. After I identified this was indeed the correct person, the next mission is to find a location. 4. Don't get dragged into details if it doesn't pertain to location. The circumstances were confusing an...

Creating Sock Puppets - Introduction I signed up for the Trace Labs Global Missing Person CTF V. Here is my experience/tips with sock puppet accounts! Virtual Machine Don't use your usual browsers. If your logged into Gmail, that will track everything and reveal your sock puppet identities. I use an OSINT VM I made myself using Michael Bazzell's OSINT book. Burner Phone Remember "Wear Hat, Pay Cash". These days you can "Wear Hat, Use Mask, Pay Cash". I got my burner phone at Walmart. StraightTalk has cheap $30 dollar flip-phones that have a working mobile browser. You can use the browser to register for Facebook and Instagram. StraightTalk (when registering online) doesn't ask for personally identifiable information. The most they requested was for a Zip Code. You can lie. Gmail Surprisingly, Gmail let me register on a VPN without email or phone number verification. Twitter Twitter let me register with a VPN + ProtonMail. LinkedIn Y...

I found my first missing person! Before I get into details let me go over some of my personal rules: 1. I will NEVER publish the name of a missing person I have found. Their runaway/bad situation doesn't need to be on the internet for everyone to see. 2. I do not contact the missing person, friends, or family members. 3. If a missing person is posted on a Government website asking for help from the public, I consider that a green-light go for it. How this all Started I found Tracelabs through a youtube video . They have a Trello board of 8 people that are missing and they rotate every month. Tracelabs hosts the Global Capture the Flag event for missing people. The next one will be in July. The issue is the Tracelabs people are faster and better than me. By the time I get to the Trello board, everything is found. I wanted to practice. I got the idea of why don't I just visit the Ohio Missing Person website and practice with that! I did not expect to find missin...

recon-ng This will be my recipe document for recon-ng. I find it helpful to document things I learn, and also as a lookup for future use. Maybe you'll get something out of my notes. If these commands don't work, make sure to upgrade to version 5.0+. Topic: General Commands 1. Marketplace Commands $ marketplace install all $ marketplace info profiler $ marketplace refresh ------------------------------ 2. Workplace Commands $ workspaces ? (create|delete|list|select) $ workspaces select OSINT ------------------------------ 3. Database Commands $ db ? (delete|insert|query|schema) $ db insert domains (after it will prompt you for a domain ex: example.com) $ db delete domains 1 $ show domains ------------------------------ 4. Global Commands $ Make sure your not in a module, if so type back. $ options list $ options set TIMEOUT 20 Topic: Specific Modules 1. recon/contacts-credentials/hibp_breach This one requires an API key bought by Troy Hunt for $3.50 a...

Another Pokemon Capture Salesforce Certifications remind me of Pokemon. There are 25 different certifications to pick from. They range from easy to hard. Some have prerequisites before they can evolve. Some gyms (jobs) want you to collect 2 or more. They are hard to catch but easier to keep. I passed my Advanced Admin today. That marks my forth Pokemon capture. I picked Advanced Admin because it is on the Q Branch list. Otherwise I would have pursued it much later. A big regret of mine is not getting these certifications sooner. Many Salesforce Developers stop at PD1. I stopped at PD1. I started Salesforce mid-2018 and only had PD1 for 1.5 years. I got my Admin January 2020. When I was job searching most jobs wanted a combination of PD1, Admin, App Builder, Sales, Service, and PD2. I got the Admin Pokemon in January to accompany me on my job search journey. Late 2019 was a bad time to realize 'Wow these Salesforce certifications seem important. What have I been doing?...

Intro to Missing People OSINT Course with Joe Gray: Review Course: Intro to Missing People OSINT Taught by: Joe Gray I found Joe's course on the TraceLabs slack channel. I saw Joe is a winner of multiple CTF competititons from Derbycon, Defcon, to TraceLabs. I thought it would be good to get his insight and a different perspective on OSINT. CCDC now.. Missing People? The interest started at Akron. University of Akron has a digital forensic presence. I didn't take any digital forensic classes and regret it. I could have worked home one day a week, left the office early, or some sort of plan. The sad ship has sailed since I'll be in Chicago. I think this happened because my interest went from 0 to 75 and by the time I got interested, it was too late! If I went to Akron (back in 2015-2018), I probably would have double majored in Computer Science and Digital Forensics, with a certificate in DISASTER! The only reason being when a project is going wrong I can say...

Lab #3 is here: Ipversity Well this one took me two days and I needed to whiteboard it. The Smartphone, WLAN was simple, getting to 8.0.0.2 got me. I thought the creator set up a Static Route to send 192.168.1.0/24 and 10.0.0.0/24 traffic back to our internal DNS Server. Then I thought hmm.. I can't set up/change Static Routes (its in the rules), do they want me to NAT it? Nothing is said about OSPF either. Its quite possible NAT and/or OSPF is a solution to this network topology. I will update this blogpost when the creator publishes his solution. Ipversity Lab #3 Writeup Step 1: This step might seem odd, but after research I wanted to tackle OSPF first. Remote Core uses OSPF 1 with router-id "10.10.10.10". HQ Core uses OSPF 1 with router-id "20.20.20.20". Lets set up OSPF1 with router-id "30.30.30.30" on Router0. Great, now MGMT-PC can ping 8.0.0.2. Lets change the MGMT-PC DNS entry to point to 10.0.13.5. Lets configure our WLAN. O...