Passed the GCIH today. Also last week I won the SANS 504 CTF for the class which was much simpler than the SANS 560 CTF. Thanks to Kevin Fiscus for the great class and props for turning a mediocre social engineering attempt into a prime Read More …
Congrats to the whole team, the Voice of Victory. This year we took first place in the The Joint Cyber Competition (JCC), formerly known as the Cyber Captain’s Cup Competition. It is a 36-hour CTF that aims to inspire creativity and the development of cyber professionals Read More …
LAPS (Local Administrator Password Solution) was just released by Microsoft. LAPS is a GPO client-side extension that manages the creation and storage of unique client local administrator accounts (RID 500). This a big blow to pentesters and attackers who compromise one system’s local admin and rely Read More …
I like encryption downgrade attacks and sslstrip. I hear a lot about attacks that are based on tricking clients to accepting a false certificate but I really like attacks that are based on weaknesses in the program logic itself. Enter CVE-2015-3152 (yes it lists the CVE as Read More …
Today I completed the GIAC GPEN certification. The test took approximately 2:30, was open book, and more difficult than I assumed! For those that have taken a SANS course and a GIAC exam, you know the importance of a thorough index! Since these tests are Read More …