Many times I’ve used Netcat to setup (reverse) shell from a compromised
machine. Digging into services lately, I thought why not use a service
to make Netcat a persistent to be able to return to the machine.
As a penetration tester you really must log all steps you take to make a
complete and detailed report for the client. Ofcourse you can’t help that
once in a while you miss one step. From my training
I got a valuable tip to use the script command for logging complete terminal
The Netherlands was plagued by numerous DDOS attacks lately. The tax
authorities, Bunq bank and many other banks and government agencies.
The attacker was careless and left some traces and was even arrogant
enough to seek contact with the sysadmin of Tweakers.net, one of the
Recently I was asked to give feedback on a new website. It uses Wordpress,
but why? Why not? So I researched a bit and was able to give a well-founded
about the risk of having plug-ins installed.
To me Universal Plug and Play (UPnP) alway was a mysterious protocol. When
some cool program required an open port, UPnP made it happen. When some
fancy program did not work, someone would ask me: “Did you enable UPnP”?
Right, I forgot… I had no clue what magic UPnP did for me.
At times I find myself in situations in which I can not rely on my favorite commandline text editor VIM.
But of course editing files is a must. Writing my own non-interactive line editor actually did cross my mind,
but hold on… What about my old time friend sed?!
Equifax is a consumer credit reporting agency and last week it got hacked. Now
the information of 143 milion US citizens, about 45% of the population, has
been compromised by hackers. The hackers got access to names, birth dates,
addresses but also social sercurity numbers and in some cases drivers license numbers.
Many years ago, I studied the art of picking locks. Not to do anything illegal, but just to learn about locks and how
they work. Most importantly, open locks in a non-destructive way the manufacturer certainly did not intend to open. I bought
a lock picking set and a practice lock. Over the years I collected some other locks, formerly used in real life. I finally
got a chance to show off my skills.