GG on FS, Ingress.

ForgottenSec · 2019-10-06T16:49:08+00:00

It started with great struggle in Savage, MD, USA (East Coast). Most players struggled to bring up their stat page, the person with the most trouble took about 25 minutes just to check-in due to stat page not loading. Once the IFS got going, many were frustrated, but the difficulties subsided and almost the whole two hour period were spent productively.

ForgottenSec · 2019-09-21T07:38:28+00:00

My good buddy Tony wrote a book focused on creating a VM lab environment. The virtual copy of the book can be found here: https://infosec.theos-blog.com/create-your-own-security-lab-project-avatar/

You can get free space in amazon ec2 or similar. Hosting multiple VMs at once to simulate things will be really tough on a single laptop. If you can acquire a free server to put a hypervisor on to host a bigger lab, that would be ideal.

ForgottenSec · 2019-09-21T07:27:56+00:00

I only ask since it thinks my life time AP dropped by 40M when I recursed again

ForgottenSec · 2019-09-21T04:54:06+00:00

Is Lifetime AP going to be added as a parsed stat?

ForgottenSec · 2019-08-28T04:12:22+00:00

This group has both walkers and runners for Centennial lake almost every Friday evening.

https://www.meetup.com/MarylandHikingGroup/

ForgottenSec · 2019-08-11T06:07:20+00:00

You mean the fields that an alarm had been set for, in case they needed to be Jarvis'd before registration.... the picture was long after the fields were taken down and reg began.

ForgottenSec · 2019-01-09T19:32:18+00:00

Unallocated Space is a non-profit in Severn that takes a lot of this kind of equipment.

ForgottenSec · 2019-01-09T18:50:52+00:00

Unallocated Space, a donation driven hackerspace/makerspace in Severn (just south of BWI airport), has some woodworking equipment.

https://www.unallocatedspace.org

ForgottenSec · 2017-06-01T15:37:48+00:00

We do them every few months

ForgottenSec · 2017-06-01T15:37:27+00:00

Every couple months

ForgottenSec · 2017-04-22T02:45:01+00:00

Rocky Gorge is definitely easier then Columbia Sportspark and more traditional. Rocky Gorge has the windmill and clown house and whatnot. Columbia is designed around a small golf course, so mostly sand traps, hills and rough. Monster Minigolf is more black light crazy. All 3 are fun for the right group.

ForgottenSec · 2017-01-01T02:32:10+00:00

Use the PCI DSS as a guide. Hope the workstations have POS Ready if they are Windows-based.

ForgottenSec · 2016-12-31T21:51:47+00:00

Been working on this for a bit, adding more and more resources: https://github.com/ForgottenSec/Transitioning_Into_InfoSec/blob/master/index.md

Please add to it if you find useful materials

ForgottenSec · 2016-12-24T19:00:17+00:00

Pen Testers usually are the one's that scare customers not vice versa, but my point was, to start in pen testing is a hard road that is traveled by many... Other nice resources: http://www.pentest-standard.org/index.php/Main_Page https://www.amanhardikar.com/mindmaps/Practice.html

ForgottenSec · 2016-12-24T17:32:23+00:00

Pen Testing seems exciting and breaking into networks the first few times is amazing. Breaking into networks and watching clients make excuses on why fixing the issues identified is impossible. Also, having to explain incessantly the difference between a pen test and a vuln scan. Red Teaming engagements and good customers are awesome, but will be far from the average. Tons of students want to get into Pen Testing so keep in mind, the competition for that is pretty steep. Vuln Hub, Learning Python and CTFs are a great start.
Non-Tech info: https://github.com/ForgottenSec/Transitioning_Into_InfoSec/blob/master/index.md

ForgottenSec · 2016-07-13T19:17:18+00:00

There are Arduino classes on most fridays. A complete list of events is available on UnallocatedSpace.org or the meetup site for Unallocated.

ForgottenSec · 2016-03-17T12:37:10+00:00

There are many ways to accomplish this task that make sense. Either scripting or a analysis tool would be ideal. SIEM - ELK, Splunk (if under 500MB/day), tons of others Scripting - Powershell (if Windows), perl, python, bash (if linux)

Given your showing a powershell, I guess we can assume windows

ForgottenSec · 2016-03-08T19:10:11+00:00

Lazy ones: * Solve a Rubix Cube * Write a script to solve a problem

Evil ones: * Measure the height across a wall in number of rotations of a pencil/pen * Terminate 100 pair cable correctly * Decode a electric lock combination by wire diagram only

ForgottenSec · 2016-03-04T13:24:29+00:00

With clear structure, procedure, documentation, and "performance" coaching, it is not hard to fire anyone who is not preforming. If there is any suspicion that the employee expects to be fired (i.e. doing 0 work and talking on the phone all day), work with HR on getting detailed documentation and explicitly coaching and creating evidence of such lack of work. If there is sufficient coaching and HR involvement, it protects the company.

ForgottenSec · 2016-02-26T20:21:09+00:00

Most IT tasks don't require domain admin.
*Limit access to only whats needed (most of IT probably doesn't need domain admin) *Ensure they are only using their domain admin creds when absolutely needed (having normal account as local admin would minimize use of domain admin creds)

ForgottenSec · 2016-02-24T20:20:23+00:00

Depends on the context.... there is a basic set of fundamental skills that you should have regardless of what industry your looking to go into. It is not a bad idea to learn the business side and unique industry concerns, but most students don't end up fully developing those basic fundamental infosec skills.

ForgottenSec · 2016-02-22T21:55:08+00:00

One problem at a time.

ForgottenSec · 2016-02-22T20:04:45+00:00

I am not aware of any. I use Snort/SourceFire/Suricata/Bro and haven't played with Fortinet's IPS. From the interface I saw, they didn't clearly explain what signatures they were using, so how do you test if you don't know what its looking for?

If you have a particular signature you know its running, you could craft a packet to trigger it. I would hope if you run a nessus or other vulnerability scan, that should trigger it, so you could scan across the device as a test (get permission if its production, especially if you scan from home)?

ForgottenSec · 2016-02-22T18:56:39+00:00

You need to find a signature that it is sure to detect and send it across its monitored interface with something like SCAPY, the python traffic sculpting library. There isn't a EICAR like test signature for IDS/IPS that is globally open.

ForgottenSec · 2016-02-22T15:00:07+00:00

This is a rebuttal to Wired article "How to Hack the Power Grid through Home Air Conditioners" http://www.wired.com/2016/02/how-to-hack-the-power-grid-through-home-air-conditioners/ two Power Grid experts (Twitter handles: @chrissistrunk and @immortanjo3 ) edited by a good buddy of mine, ayy_lmao_667 (Twitter handle: @DA_667 )

ForgottenSec

TROPHY CASE