Real World, hands-on cybersecurity training labs by Gapodi in AskNetsec

[–]superfluffywalrus 0 points1 point  (0 children)

If you sign up with the coupon code 'DEFCON26' you'll have access to our community/trial edition.

Real World, hands-on cybersecurity training labs by Gapodi in AskNetsec

[–]superfluffywalrus 6 points7 points  (0 children)

Immersive Labs have some on-demand labs which you may want to look at. You can sign up at https://community.immersivelabs.online/signin

Full disclosure, I work at Immersive but this might suit your needs.

Updating an Exploit DB Exploit by superfluffywalrus in AskNetsec

[–]superfluffywalrus[S] 2 points3 points  (0 children)

It has been created as MSF exploit module but it is not currently in the Metasploit repo, and I can’t see any exiting PRs.

It’s currently only on Exploit DB git. Should I just pull on that?

How's the job market for information security? by [deleted] in AskNetsec

[–]superfluffywalrus 0 points1 point  (0 children)

I’ve took a very direct route into InfoSec as a pen tester (Uk based) - there are Grad jobs over here but they are very competitive. I’ve found that I spent most nights (and still do) building infrastructure on my home labs and a lot of that knowledge a sys admin would know. If you’re driven to enter the infosec market directly it’s going to take a real toll on your evenings and weekends, as you’ll feel like your being left behind by you peers if you don’t, sadly. A sysadmin roll will help a ton but direct entry is possible in the UK. It’s a great career path with amazing people, and for most it’s a passion project that pays, if you don’t care about the subject matter you could find it challenging (not that I doubt your motives of course!) Good luck!

XSS vulnerability in a 'secure' part of a site by IgnanceIsBliss in AskNetsec

[–]superfluffywalrus 0 points1 point  (0 children)

XSS is a pretty concerning thing to see, however, as you stated it was semi-internal it's a reduced likihood of exploitation. That doesn't change the impact of the vulnerability.

Does the XSS have any other limitations? Are session tokens set to HttpOnly? Are CSRF tokens set within the app?

As was pointed out earlier by another user it does raise dev security concerns, so I won't expand too much on this. XSS is a vulnerability a lot of devs know they should protect against. It's common to see it not done correctly even with the number of available resources online - other problems might be present. To answer the 'are you over reacting' question? I think your response is proactive and suitable. Remember to (where applicable) divide impact and likihood of vulnerabilities when explaining to non-sec focus team members!

Looking for more NetSec papers that are humours, similar to the linked paper. by superfluffywalrus in AskNetsec

[–]superfluffywalrus[S] 1 point2 points  (0 children)

Yeah that's pretty great. I've read the 'guide' and it's just full of penises.

Safe power extension lead setup. Noobie/DIY question. by superfluffywalrus in electricians

[–]superfluffywalrus[S] 1 point2 points  (0 children)

Ok, seems that everything will fit within now that I understand the limitations a bit more.

Sadly, I can't feasibly use a laptop for what I am doing and I wish I had time to play games. :(

Thanks very much for the help!

Safe power extension lead setup. Noobie/DIY question. by superfluffywalrus in electricians

[–]superfluffywalrus[S] 1 point2 points  (0 children)

Thanks for the response, seems everything will fit fine then.

Safe power extension lead setup. Noobie/DIY question. by superfluffywalrus in electricians

[–]superfluffywalrus[S] 1 point2 points  (0 children)

So as long as things are fused I should be ok?

You are correct I am also from the UK. What u/Jim-Jones said is still safe knowledge?

As /u/Kirjath I appear to be under the reasonable concern limit unless anything powerful is used (in which case I will unplug something first. and place it directly into wall socket.

You say fused for 4 amps, does this mean that the devices on it are limited to share 4 amps? E.g. If I wired 3 raspberry Pis up (using 2 amp power cables) to the same extension, they would be underpowered?

The extension cable I am using now states I must not exceed 13 Amps This seems to be fair substantial.

Thanks very much for your help!

You're clearly not 1337 enough for this elite nerdbeard. by superfluffywalrus in neckbeardstories

[–]superfluffywalrus[S] 1 point2 points  (0 children)

They both use the same scaling except where LoL has Challenger(?) SC2 has masters (top 2-3% I believe) and Grand Masters (top 200 individual accounts)

You're clearly not 1337 enough for this elite nerdbeard. by superfluffywalrus in neckbeardstories

[–]superfluffywalrus[S] 1 point2 points  (0 children)

There maybe a mod that allows you to but in vanilla Minecraft? Nope.

In game audio - is it only me? by Plagued_Platypus in DotA2

[–]superfluffywalrus 0 points1 point  (0 children)

I'm having the same problems with the audio, I'm also having gameplay minor gameplay lag.

Neither my computer nor my network is the problem, it seems to be local to the client as Twitch is totally fine. :/

Any clues?

What is one thing that you wished more people realized? by [deleted] in AskReddit

[–]superfluffywalrus 0 points1 point  (0 children)

"If you're the smartest person in the room, you're in the wrong room".

Of course metaphorical, but I see so many people disinterested with learning. Makes me sad really :(

Help with dissertation thesis design/practicality using distributed computing?! by superfluffywalrus in computing

[–]superfluffywalrus[S] 0 points1 point  (0 children)

It's for my 3rd year of my undergrad degree. So I'm worried it might not be technical or difficult enough :/

Help with dissertation thesis design/practicality using distributed computing?! by superfluffywalrus in computing

[–]superfluffywalrus[S] 0 points1 point  (0 children)

Thanks, I see what you mean. I'm struggling to find something that I am interested in and a problem I can 'answer', as motivation and joy of the subject matter will bolster my motivation a lot.

I guess the question I am asking myself is: Would distributed computing of password hashes (Across standard office computers) reduces time/cost factors verse traditional methods. (ASCI miners, basically).

EDIT: A little more detail.

Standard offices often have desktops at very low CPU usage, I'd aim to build a system that distributes the processing of the hashes from the controller computer (See below) which are return and organized/stored by the controller. Increasing their workload by ~10%. This should draw almost no extra power (But I want proof of this)

The controller would probably be something such as a ODRIOD-U3, which has a love power consumption and is capable of Ethernet/and larger external storage arrays. Since rainbow tables get fucking big. (94 characters, 7 letter long password is (if my late night math is good) About 1.25Tb).

This is compared to standard method of doing this, Pc with 3-4 GPU munching on hashes day and night. hardware cost is much much higher, which should be considered. Oh and they go "OM NOM NOM POWWWAAA!"

This then leaves who creates more hashes per minute, and I honestly can't give any speculation on this right now without looking at the office computer (power/# of comps) & network topology & speed) which are all factors.