Securing your online presence
Introduction This article aims to set out the basics of how you can approach assessing the security of your webapp hosted in Azure. This post is part of the Azure Spring Clean series and I’d like to thank Thomas Thornton and Joe Carlyle for the initiative! There is some great …
Intro On February 16th 2021, LastPass issued guidance to say that they are changing how their free model works. Under the free plan, you will only be able to use your LastPass account on one device type. This is not great if you use LastPass on both your phone and …
Last week I installed the TPot Honeypot framework on an Azure VM. (Click here!) The amount of information and dashboards available has been overwhelming. The first thing to do, to make sense of it all, is to look at the dashboards and make a table of what is available and …
What is a Honeypot A honeypot is a computer or VM that you expose to the internet with the intention of catching malicious login/scan attempts, and it logs them. Over time, you can use the logs to identify trends, for example the most common usernames for bruteforcing, common directories that …
The OSCP is a course and exam with Offensive Security that is widely recognised as a gruelling test of your abilities as a pentester. The objectives are to hack into and gain system access on five lab machines throughout 24hours, and then to submit a written report the next day. …
Today I completed my Azure Security Engineer Associate exam and I just wanted to write a quick review of how I found it and the learning material I used. Learning Material I will outline the material that I used, or think should be used, in a sort of chronological order. …
For those that don’t know, pentesterlabs.com is a website that takes you through the methods and tools used for primarily web hacking. The Essentials badge introduces many of the popular methodologies used when web hacking. The site itself describes the badge as “ This badge aims at covering the most common …
A recent challenge on HackTheBox had me banging my head off a wall for a full weekend. Without going into too much detail, or which challenge it was, I figured out that there was a third party service that ran an scheduled task every minute. I could use this job to run …
For those that don’t know, HackTheBox is a website which hosts around 20 live ‘boxes’ (read servers) for cyber security enthusiasts to practise their hacking skills. Points are awarded based on the difficulty of the box and the level of access one secures. I have been practising using this site for around six …