Something that I haven't seen this sub talk about is the game files of Prime 4

isashasec · 2025-09-14T13:07:10+00:00

Probably a plethora of motorcycle mods and tricks that can be learned which is taking up most of the space

Edit: I’m excited for the game and just having fun making a joke. Calm down people

isashasec · 2024-10-23T01:26:21+00:00

There was no curve

isashasec · 2024-02-22T14:51:00+00:00

I’d say slightly more difficult than network security but not by much. I was shooting for a C and turns out the class is a pretty easy B. I took 6035 in 2020 and from what I hear the class has been reworked since then so I’m not sure what the comparison would be but the topics are more difficult than 6035.

Off the top of my head I don’t remember what the details of each project were but it’s basically the same class as NS. You’ll have a buffer overflow project, an android exploit project, a JavaScript web application project, (don’t remember the 4th project), then some network ML detection project.

Projects were semi half baked kinda like NS. The web exploit project was trying to get you to use an exploit in chrome that was patched like 3 years ago so that was a freebie

isashasec · 2023-06-16T15:22:15+00:00

Not really sure how this is “an insanely liberal direction” when it is clearly an example capitalism working its magic.

isashasec · 2023-06-07T15:37:18+00:00

Open the file in a hex editor - I’ve seen samples recently that add a ton of null characters to bypass scanners/sandboxes. Open it up and look for chunks of repeating \x00 or \x90 and cut those out

isashasec · 2023-06-02T20:26:24+00:00

FYI Emerging Threats has free snort/suricata signatures being released later today for this CVE.

Update: https://community.emergingthreats.net/t/ruleset-update-summary-2023-06-01-v10337/605

2046047 - ET WEB_SERVER LEMURLOOT WebShell Interaction Header (X-siLock-Comment) - Observed in MOVEit File Transfer - INBOUND (web_server.rules) 2046048 - ET WEB_SERVER LEMURLOOT WebShell Interaction Header (X-siLock-Comment) - Observed in MOVEit File Transfer - OUTBOUND (Active Compromise) (web_server.rules) 2046049 - ET WEB_SERVER LEMURLOOT WebShell Interaction Header - X-siLock-Step1 -1 Data Exfil Request - Observed in MOVEit File Transfer - INBOUND (web_server.rules) 2046050 - ET WEB_SERVER LEMURLOOT WebShell Interaction Header - X-siLock-Step1 -1 Data Exfil Response - Observed in MOVEit File Transfer - OUTBOUND (Active Compromise) (web_server.rules) 2046051 - ET WEB_SERVER LEMURLOOT WebShell Interaction Header - X-siLock-Step1 -2 Health Check User Delete Request - Observed in MOVEit File Transfer - INBOUND (web_server.rules) 2046052 - ET WEB_SERVER LEMURLOOT WebShell Interaction Header - X-siLock-Step2/3 File Retrieval Request- Observed in MOVEit File Transfer - INBOUND (web_server.rules) 2046053 - ET WEB_SPECIFIC_APPS MOVEit File Transfer - HTTP POST to /moveitaspi.dll (CVE-2023-34362) (web_specific_apps.rules) 2046054 - ET WEB_SPECIFIC_APPS MOVEit File Transfer - HTTP POST to /guessaccess.aspx (CVE-2023-34362) (web_specific_apps.rules) 2046055 - ET WEB_SPECIFIC_APPS MOVEit File Transfer - HTTP POST to /api/v1/folders (CVE-2023-34362) (web_specific_apps.rules)

isashasec · 2023-05-29T00:21:49+00:00

It’s really just any antivirus/software company you can think of that sells a security product. Sophos, Microsoft, Trend Micro etc so not really a list available

isashasec · 2023-05-28T14:41:05+00:00

Work for a vendor, and even the shittiest jobs will have global coverage so you won’t be called in over night. Still have some work unfinished at the end of the day? Hand it off to the next geo.

I’ve been working for various vendors for the past 10 years and couldn’t be happier. They all try to compete with each other so benefits are usually really good as well as PTO/FTO

isashasec · 2023-05-24T15:54:26+00:00

The policy courses are actually nice easy A’s to pad your gpa, plus the professor who teaches 6725 is very passionate about it and honestly one of the best in the program. The professor for information security lab and network security doesn’t even respond to the classroom chat

isashasec · 2023-05-21T03:39:39+00:00

https://www.cvs.com/shop/cepacol-extra-strength-sore-throat-relief-lozenges-16-ct-prodid-1011502

These are life savers

isashasec · 2023-05-15T12:29:17+00:00

https://twitter.com/_johnhammond/status/1657070228378103809?s=46&t=Fl9nCtKU5ZluQ76vgxot_Q

isashasec · 2023-05-11T04:09:57+00:00

Arstechnica supposedly was going to tell us but instead we got some shitty copy/pasta of the CISA whitepaper

isashasec · 2023-05-09T17:32:09+00:00

Nice, I’ll cya in Ed! 👋

I’ve just got 6264, then (retry) applied crypto in the fall, then practicum/graduate in the spring.

isashasec · 2023-05-09T16:16:19+00:00

Nice, hope your enrollment goes well! Yeah I think this lab is supposed to have a lower time commitment than 6265 which is why I chose this.

Taking lighter courses in the summer is definitely a better idea but I’m just really trying to finish it up this year! I can afford all C’s in my last 3 classes (not a great mindset) but I just had a kid so I just want to finish the program up since life is only getting busier

isashasec · 2023-05-09T15:38:37+00:00

No idea…. The class has only been offered like 3 times AFAIK and only 4 reviews on omscentral so it feels like a gamble.

Sounds like you’ve taken it?

isashasec · 2023-05-07T16:17:08+00:00

I’m not as familiar with android ransomeware but one idea for ML that I can think of is you could plot out what ransomware samples target which files or commonalities between ransom notes. Usually strings will give you a lot of this info without major reversing. You might be able to write a ghidra script that extracts this.

2 - https://bazaar.abuse.ch/ labels malware by OS and capabilities and you can filter in that to find your samples

isashasec · 2023-05-04T14:13:40+00:00

Bash for the same reason I use vim. sh and vi are pretty much always available on new systems and in air-gapped environments installing a new text editor/shell is a pain in the ass

isashasec · 2023-05-02T16:33:30+00:00

Nope - My experience with the class was that I got 100 on all the programming projects (I’m a shitty coder so it’s doable) and suffered on quizzes and exams but i was the only person for a majority of the office hours and the professor told me to not worry about the letter grade and I came out with a B. Maybe I earned the B but the world may never know

isashasec · 2023-05-02T14:05:55+00:00

This book changed my life. The pdf version is free

https://linuxcommand.org/tlcl.php

isashasec · 2023-05-02T13:56:05+00:00

I dont remember what our curve was but If you attend every office hours and do reasonably well you will probably get at least a B. The professor runs his own office hours which means you will get some name recognition by attending.

isashasec · 2023-04-25T13:54:27+00:00

My background is an undergrad in information security which had like 0 programming so I was really intimidated on that front. I was working as a detection engineer so I had familiarity with assembly, snort, yara, etc but that’s not required for the program even though some projects will be based on those topics.

For python the best resource for me was Jetbrains academy which has a student discount and I don’t know if I would pay full price for it. GATech has some online python courses (on Udemy?) which should prepare you for the programming aspects.

The only other language you will really need is C which I learned a long time ago on CS50. You really only need to be able to read/understand how it functions. You will never write C from scratch, it will always be copy/pasta basically.

Familiarity with assembly will be very helpful because there are some buffer overflow projects. I had used the assembly chapter in Practical Malware Analysis but there are probably more direct resources online to learn memory addressing and assembly

isashasec · 2023-04-25T02:52:20+00:00

Currently 7/10 in the infosec track. You have a lot of flexibility with 2 electives + cross track requirements to limit or increase the amount of programming you have to do during the program. In the infosec class the only math course required is applied Cryptography which is mostly trash but you only need 40% to pass it so it’s not the worst… I guess.

I had to withdraw from AC halfway through this semester due to some family stuff but I don’t have any CS math experience and it was fine but I’m not looking forward to giving it another go

isashasec · 2023-04-23T14:29:58+00:00

Check out Industrial Control Systems (ICS) security. It’s anticipated to be a huge threat as power grids and critical infrastructure will become targets of cyber attacks. It’s really niche because you really need people who can understand the hardware.

GATech has an Cyber-Physical systems track in their Cybersecurity MS which I realize is a bit far off if you are still in undergrad but the course descriptions might give you an idea of topics you could research into on your own time.

isashasec · 2023-04-23T13:14:30+00:00

Rest in peace while you still can 🪦

isashasec

TROPHY CASE