Greetings!
Welcome to my site, here you can find information about me, what I’m up to and how to get in touch. You can also read my blog, or not, up to you I guess.
Most Recent Posts:
With my recent new employment as a graduate penetration tester, my mind now turns to the next major hurdle that any InfoSec consultant must jump to advance their career, certifications. It can be pretty daunting to figure out where to start in the world of security certifications, but luckily I’ve...
[Read More]
Getting Started; Included
Containers and PHP Shells
In my quest to polish off all the starting point Hack The Box machines before they get stuck behind a paywall again in January, I moved on to the Included machine. I started off, as is custom, with an nmap scan. # Nmap 7.92 scan initiated Thu Dec 23 19:44:17...
[Read More]
Advent of Cyber 2021, Days 11-25
My Learnings and Thoughts
Day 11 Today’s challenge involved accessing an MSSQL server and was an activity I ended up learning a fair amount from. The first part of this challenge that was new to me was the MSSQL client used to access the server. sqsh -S {target} -U {user} -P {password} Previously I...
[Read More]
Getting Started; Vaccine
Delving into SQL injection
After booting up the instance I began, as I always do, with an nmap scan using the -sC and -sV options.
[Read More]
Hackcelerator Major Project Part 1
Setting up my lab
As part of the Privasec (now Sekuro) Hackcelerator program, I was tasked with experimenting with a very basic meterpreter shell in order to identify potential indicators of compromise. To begin, the first thing I needed to do was set up a couple of virtual machines using VirtualBox, one Kali machine...
[Read More]
Advent of Cyber 2021, Days 1-10
My Learnings and Thoughts
With December once again upon us, I decided to wade into the litany of advent challenges that inevitably fill up my inbox each year. This year, one of the advent activities I chose to take on was TryHackMe’s ‘Advent of Cyber’, a set of 25 beginner level, Christmas-themed CTF challenges...
[Read More]
Getting Started; Oopsie
Return of web security
After having stuggled my way through Archetype, I was pleased to notice that this next box had a greater emphasis on web security, an area where I am much more comfortable. After spinning up the machine I began, as usual, with a fairly basic nmap scan.
[Read More]
Hackcelerator Minor Project Part 3
Performing Vulnerability Assessments
The Fun Part
[Read More]
Hackcelerator Minor Project Part 2
Server Hardening
Hardening SSH
[Read More]
Hackcelerator Minor Project Part 1
Setting Up Wordpress
Getting Logged In
[Read More]
Steggle Development Part 5
Implementing Read
With the write system proven to work based on my previous experimentation, this week I set about implementing a read system that could take written messages within images and easily decode them for display to the user. My process for collecting data from the image’s bitmap was pretty much the...
[Read More]
Steggle Development Part 4
Implementing Write
With the knowledge and proof of concept gained from last week’s work, I finally set about actually implementing part of my steganography tool. This week I focussed on the write feature and my overall goal was to fully implement it by the end of the week. My first challenge was...
[Read More]
Steggle Development Part 3
Image Manipulation
With all the planning research work out of the way, this week I finally started work on producing the program itself. My primary objective of this week’s work was to produce code that acted as a proof of concept, code that could conclusively show that the solution I have been...
[Read More]
Steggle Development Part 2
Exploring Steganography
My first priority for my project this week was to undertake some research on how exactly messages can be hidden within PNG image data. Throughout my research I have frequently come across a technique known as ‘least significant bit’ steganography, it is generally regarded as the simplest and most straight...
[Read More]
Steggle Development Part 1
Exploring PNGs
In order to understand how to modify a PNG, the first step I knew I needed to take was to learn how exactly a PNG works, how it’s structured and how I can go about changing its raw data. Naturally, my first step was to discover the structure of a...
[Read More]