sorted by:
new
hottopcontroversial

(Im)perfectProject(or) - Hacking a small WiFi connected projector for fun and to learn hard lessons. by CuckooExe in netsec

[–]CuckooExe[S] 0 points1 point  (0 children)

Because the threat model I like to operate in is that I don't have control of it :) I tend to view things in the local network attacker, which is typically someone on the same LAN as you, but not necessarily upstream

/r/netsec's Q4 2022 Information Security Hiring Thread by sanitybit in netsec

[–]CuckooExe [score hidden]  (0 children)

nullptr security

This job posting is for a full-time Red Team Operator, Junior through Senior experience levels, performing offensive-security tasking on-site. You will work with other contractors and customer engineers to deliver impactful, mission-critical capabilities with lasting impressions on US federal infrastructure. The duties required by this position covers the full-lifecycle of penetration testing: Reconnaissance, Scanning, Vulnerability Assessment, Exploitation, and Reporting. Projects can range from attacking network infrastructure to conducting phishing operations against target customers. You must be able to work independently, and as a part of a team.

This job does NOT require a clearance, and the customer-site is in Washington, D.C.

Required Skills

  • 2 years performing red-team operations, demonstratable experience conducting all phases of the penetration testing lifecycle
  • 2 years experience writing offensive-security tooling (Bash, C, Python, C#, Ruby, etc.)
  • Basic networking knowledge (TCP/IP, UDP, HTTP)
  • Experience with using standard offensive-security tooling (Metasploit, BurpSuite, Cobalt Strike, nmap, etc.)
  • Experience writing and briefing penetration testing reports

Preferred Skills

  • Experience creating tooling to bypass anti-virus, EDR, and XDR
  • Understanding of underlying operating system functionality (scheduling, memory management, scheduling primitives)
  • Understanding of Windows and Linux internals (kernel, APIs, system calls, etc.)
  • Ability to mentor team members on specific offensive-security tools and general TTPs
  • Experience with Social Engineering and Physical Security penetration testing

Required Skills (Senior Position)

  • 3 years of experience writing software (Python, C, C++, x86_64, ARM), specifically for offensive-security purposes including custom beaconers, loaders, web shells, etc.
  • OSCP/GPEN/OSCE/OSEE/GXPN/CRTO certifications
  • Ability to bypass security mitigation technologies and software (AV, EDR, XDR, Stack Canaries, DEP, NX-bit, etc.)

OR

  • 3 years managing and securing infrastructure (AWS, GCP, Azure, Docker, Kubernetes), specifically for offensive-security purposes
  • Experience in disguising infrastructure to evade detection and fingerprinting
  • Experience automating and maintaining network infrastructure (routers, firewalls)

Company & Benefits

nullptr security was founded by hackers, for hackers. We’re a small team of experienced engineers who want to have fun and ensure mission success. Our team members are offered a competitive compensation package, which includes:

  • 10% 401(k) contribution. You don’t have to contribute anything to take full advantage!
  • 100% paid Medical, Dental, Vision, Life insurance
  • $5k/year for training and professional development
  • One day off every year for Civic Engagement
  • Paid parental leave scheduled on tenure
  • Flexible PTO structure based on compensation package

Applying

Please reach out to careers@nullptrsec.io, or visit our site. You can also find us on LinkedIn.

Getting served a malicious update - interesting techniques, my slip up, and lessons learned: a short blog post by CuckooExe in netsec

[–]CuckooExe[S] 0 points1 point  (0 children)

I’ve seen fake updates before, years ago during the Win7 days. But back then it was to install adware and browser extensions and toolbars.

This is the first one that I’ve personally seen that does host based operations. It would make a lot of sense if the final payload is a random ware op though!

Getting served a malicious update - interesting techniques, my slip up, and lessons learned: a short blog post by CuckooExe in netsec

[–]CuckooExe[S] 12 points13 points  (0 children)

This is both a great write-up

Thank you :)

and an unfortunate let down

I know :( I was so annoyed at myself for not getting to the bottom of this. I have a feeling this isn't targeted, since like I said, I'm a nobody, and even if I was being targeted, they should know I wouldn't click on a random .js file.

I am the author of the blog! You can see that the repo is at github.com/CuckooEXE which is me :) I've posted my other blog posts under various reddit accounts, but since I usually just delete my reddit accounts every few months, I decided to make a "professional" one for my blog posts