opsdisk

It's refreshing to see the page focused on security and your approach/philosophy: https://abridge.io/security/

Did you proactively add that or have customers requested it?

Yeah, realized that a few months later...must have unconsciously suppressed the nightmare of taking those tests.

Didn't know renaming a repo was this straightforward in Github: https://help.github.com/en/github/administering-a-repository...

Scantron is a distributed nmap and masscan scanner comprised of two components. The first is a Master node that consists of a web front end used for scheduling scans and storing nmap/masscan scan targets and results. The second component is an agent that pulls scan jobs from Master and conducts the actual nmap/masscan scanning. A majority of the application's logic is purposely placed on Master to make the agent(s) as "dumb" as possible. All nmap/masscan target files and nmap/masscan results reside on Master and are shared through a network file share (NFS) leveraging SSH tunnels. The agents call back to Master periodically using a REST API to check for scan tasks and provide scan status updates.

There is also a Python client for interacting with the Scantron API and driving automated workflows.

> It puts the onus on the employee, rather than the Security team to stop phishing attacks

Hits the nail on the head right there. Phishing simulation training (both externally paid and internal) is a way for organizations to say they are at least trying to do something to minimize the #1 attack vector. Plus, it's cheaper than actually tackling the problem at the technical level (tweaking/updating email rules/settings) with whatever email defensive appliance is (or isn't) being used.

I launched PhishBarrel (https://phishbarrel.com) based on the thesis that most phishing emails can be identified using technology, and if one gets by, having a robust API for investigations, security automation, and/or remediation is table stakes in today's security products. If you're serious about upping your organization's email phishing defensive capabilities, please reach out to me (email is on phishbarrel.com site). I'm looking for forward thinking infosec folks that are looking for a partner to tackle this problem!

"Rackspace is setting aside $10M in free OpenStack Public Cloud hosting resources over the next 6 months for organizations participating in COVID-19 relief efforts"

https://www.rackspace.com/lp/covid-19

Definitely been meaning to test out Amazon's V2 metadata service. I presented some research last year on misconfigured reverse proxies [0] that allowed access to the metadata URL within AWS, Azure, and Digital Ocean. Not sure if a hardened service is on the roadmap for Azure or Digital Ocean though, so this could fill that gap.

[0] https://github.com/opsdisk/cloud_metadata_extractor/blob/mas...

Thanks for sharing this...love seeing creative uses of SSH tunneling! It's so simple, but powerful too. Going to dig into the article some more later. If anyone is interested, I wrote a whole book on SSH tunneling and port redirection...it's free if you're a student:

The Cyber Plumber's Handbook

https://cph.opsdisk.com/

Great to hear...hope it helps!

As stated in the original post, it was only valid for 2 days through May 19. If you're a student, you can still get it for free. Just checkout the website for details https://cph.opsdisk.com

As stated in the original post, it was only valid for 2 days through May 19. If you're a student, you can still get it for free. Just checkout the website for details https://cph.opsdisk.com

Nice catch, thank you wdroz!

In my experience, if you're going into security, it's good to have a solid foundation in either networking (routers, firewalls, switches), system administration, or software development. In your case, being a software engineer allows you to tweak, improve, or write your own tools. For example, some security tools have a hard coded HTTP User-Agent string that is flagged by security devices as a "hacker" tool. If you know how to go in and change it, it makes you harder to detect (assuming you're doing an ethical pen test / red team engagement).

Check out Hack The Box (hackthebox.eu) which are a bunch of vulnerable virtual machines that can be hacked. It's totally free. The Offensive Security Certified Professional (https://www.offensive-security.com/information-security-cert...) is the gold standard in terms of getting a cert. You get 24 hours to exploit 5 boxes and elevate to admin/root.

Cool, thanks for the recommendation.

Was it not showing $0 for you pests? Just want to make sure I'm not hitting some threshold with Gumroad...coming up on 2000 copies requested!

Haven't had too many requests for that yet. Do you have any recommendations for creating an epub file? The book was written in LaTeX with VS Code. I worry that a lot of the command line stuff and images wouldn't look good on a reader.

If you want it today, it's $0 if you go here: https://gumroad.com/l/the_cyber_plumbers_handbook/hackernews...

I'm still trying to find a fair price for it, not ready to bring it down to single digits just yet.

Thanks for the detailed feedback. That is a good idea I'll incorporate in the next version. Even some of the basic SSH server hardening goes a long way. I'd love to offer an actual lab for folks so they don't need to spin up their own, but just haven't had the demand (and time) to set that up.

Yeah, there was a major bug with portfwd last Fall. Last time I checked a few months ago, it was working in Metasploit 5.

Just tried this link and it still looks like it's discounted: https://gumroad.com/l/the_cyber_plumbers_handbook/hackernews...

Let me know if it's still not working.

Never thought it'd stir those emotions! Hope it helps even more throughout your IT journey.

Nice post...covers some good use cases. I wrote a book all about SSH tunneling and port redirection use cases in depth...primarily for penetration testers. "The Cyber Plumber's Handbook" (https://cph.opsdisk.com/) is free (already given away 250+ copies) for students that have an educational/student email address. Simply send an email to cph-student@opsdisk.com and I'll send you a discount code to download it for free.

It walks you through the basics of SSH tunneling (both local and remote port forwards), SOCKS proxies, port redirection, and how to utilize them with other tools like proxychains, nmap, Metasploit, and web browsers.

Advanced topics included SSHing through 4 jump boxes, throwing exploits through SSH tunnels, scanning assets using proxychains and Metasploit's Meterpreter, browsing the Internet through a SOCKS proxy, utilizing proxychains and nmap to scan targets, and leveraging Metasploit's Meterpreter portfwd command.