Compile Medusa with SMBv2 Support – Kali Linux
I’ve been doing this for way too long and I’m getting old. I’m comfortable with specific tools I’ve used for 15 years. I like using Medusa created by jmk-foofus. What if your client has their shit...
View ArticleReset to Defaults – Cisco Router
Reset Cisco 1720 Router to Factory Defaults Part of building the Cisco lab is setting up the cheap router I bought on Ebay. I want start the configuration from scratch so we will reset the device to...
View ArticleClik here to view.
ESCAM QF100 – UART
Please see the original post on IP Camera Security before reading the rest of this post. Based on comment #1 by Carlo UART exists on his Hi3518 wifi cameras. He also mentions the default password of...
View ArticleClik here to view.
SRICAM AP001 – UART
Please see the original post on IP Camera Security before reading the rest of this post. Based on comment #2 by Carlo UART has been identified for my SRICAM AP001. Carlo stated that the board looks...
View ArticleObtaining Domain Controller Password Hashes
I have referred to the following bookmarked URL in the past as a reminder on how to easily obtain the NTDS.dit and SYSTEM registry for analysis. Obtaining NTDS.Dit Using In-Built Windows Commands...
View ArticleClik here to view.
PCI-DSS Requirement 8.2.3 Makes you Less Secure
This is a quick blog post on my thoughts regarding PCI-DSS password requirement 8.2.3 and how I think it creates an environment where all non-CDE data is left exposed via weak password requirements. I...
View ArticleClik here to view.
Have fun at Goodwill part 2 – Finding Networking Equipment for Fun and Profit
As I’ve written about previously, a great place to pick up outdated, and potentially vulnerable, wireless routers is your local Goodwill. Depending on the store those shelves can be packed with devices...
View ArticleClik here to view.
IP Camera Security
In reviewing my browser bookmarks I see this blog https://reversatronics.blogspot.com/ is still active. I’m examining the blog entry at...
View ArticleNvidia Drivers and Hashcat on XUbuntu 18.04.1
Note this turorial begins on an Xubuntu 18.04.1 system after a fresh install and I made the error of installing the latest Nvidia Drivers (415) and hashcat from the repositories. I got the error...
View ArticleClik here to view.
milo2012 – Reversing LifeSize 220 HD Video Conferencing Appliance Firmware
Reversing LifeSize 220 HD Video Conferencing Appliance Firmware https://milo2012.wordpress.com/category/reversing-firmwares/ This blog post is from 2011 so I will going through the post to learn about...
View ArticleClik here to view.
Have fun at Goodwill – Finding Networking Equipment for Fun and Profit
A great place to pick up outdated, and potentially vulnerable, wireless routers is your local Goodwill. Depending on the store those shelves can be packed with devices for only a couple bucks. While...
View ArticleClik here to view.
D-Link DIR-130/330 VPN SOHO Device Vulnerabilities
Below is the write-up and information I submitted to CERT 1/15/2017. I also submitted this information to D-Link 9/22/2015 but never heard a response. I gave a presentation to a group of Kennesaw State...
View ArticleClik here to view.
Back to the Future with Embedded Device Security
Lets hop in our Delorean and head back in time where systems were developed without considering security. The current state of embedded device security is reminiscent to PC computing 20 years ago. It...
View ArticleCisco Router Password Recovery – Console Access
I was strolling through my local Goodwill and I spotted a Cisco 871w on the shelf for the same $3.99 price tag as the shitty Netgear sitting next to it. I have zero need for this device but for $3.99 I...
View ArticleClik here to view.
Compliance Based Penetration Testing – You’re Doing it Wrong
What is a penetration Test? According to the National Institute of Standards and Technology (NIST) a penetration test is defined as the following: A test methodology in which assessors, using all...
View ArticlePurge and Install Latest Nvidia Drivers – Ubuntu
There are some issues with the steps listed on the hashcat FAQ found here. This quick tutorial is specifically geared for Ubuntu when you have installed the nvidia packages from the repository. This is...
View ArticleCisco MAC Address Port Security
Cisco MAC Address Port Security We are going to configure basic, no frills, port security on the Cisco Catalyst 2960. From Understanding Port Security – Chapter 62 – Configuring Port Security You can...
View ArticleReset to Cisco Switch to Factory Defaults
First step is connecting the Cisco console to our workstation. I chose to use the Console cable plugged into a Prolific Serial-to-USB adapter. While you can plug your adapter into your Windows...
View ArticlePentest Lab: Cisco Port Security
The following articles that I post will assist in getting your lab setup so you can test techniques to bypass port security. We will start simple and work our way up from “not really secure” to “a...
View ArticleWR703N with GPS Module
WR703N with GPS Module This tutorial uses the WR703N serial port with a u-blox REYAX RY836AI GNSS receiver module for a super-portable War-Walking / War-Driving device. Obtaining Openwrt *Note:...
View Article![BLACKPINK – DEADLINE – EP [iTunes Plus M4A]](http://is1-ssl.mzstatic.com/image/thumb/Video211/v4/de/b3/b1/deb3b1d4-ba28-22e8-2428-ef97617b2a4b/90d54d743002a6d66308f217cd867947_Preview_Image_Intermediate_nonvideo_sdr_426725135_2574858051.png/316x316bb.webp)
