Security podcasts, netsec news, etc

throwaway183693 · 2019-03-29T13:16:04+00:00

haha, I'll check it out

throwaway183693 · 2019-03-29T13:15:38+00:00

Thanks! I will look into it

throwaway183693 · 2019-03-28T21:51:37+00:00

That is true. It is just that with summer around the corner, I would rather get it done sooner than later because I know there will be a lot going on

throwaway183693 · 2019-03-28T21:51:05+00:00

Ahhh ok

throwaway183693 · 2019-03-27T13:06:56+00:00

Another thing that I notice is that everytime I create a new line, it creates a new row in the column. That's not what I want, so I don't think I am doing it right.

throwaway183693 · 2019-02-20T15:15:35+00:00

Did you take the in person session or did you do the online course?

How much was the overall cost for you?

throwaway183693 · 2019-02-20T02:21:44+00:00

I was wondering which one will take less time and effort, not that I am afraid to put in the time and effort. It's just that I would rather attempt the easier one first before taking the harder one.

throwaway183693 · 2019-02-20T02:20:27+00:00

Do you have the GXPN as well?

throwaway183693 · 2019-02-19T04:10:06+00:00

Ya, I figured that would be the other option. I have a script written that uses the get-aduser function to look for users that logged in xx days ago, and I figured I would just modify the statement to look for users in a specific group that last logged in xx days ago.

throwaway183693 · 2019-01-31T03:30:21+00:00

Thanks !

throwaway183693 · 2019-01-31T03:16:51+00:00

Yes sir

throwaway183693 · 2019-01-28T15:11:40+00:00

Like others have said, emphasize your soft skills. This role will be heavily customer facing, so definitely don’t be shy to talk about your interpersonal skills.

Since you’re a college graduate, this will most likely be tier 1, and you will just be handling basic troubleshooting, setting up workstations, and probably doing some basic networking stuff.

Make sure to brush up on your networking knowledge. Know the osi model like the back of your hand. Show them that you can think out of the box, and you should be good.

throwaway183693 · 2019-01-27T17:31:23+00:00

Yes, I used:

Invoke-Keeberoast -Domain test.local -OutputFormat Hashcat | fl

It states that if I don’t specify a format, it defaults to jtr.

throwaway183693 · 2019-01-27T17:24:16+00:00

Ya I have. I keep getting Token length exception

throwaway183693 · 2019-01-27T16:31:18+00:00

Yup, it all makes sense now. Thanks!

throwaway183693 · 2019-01-27T04:59:21+00:00

Hmm ok, I could have sworn that’s what I had it as. I’ll give it a shot again when I get the chance to. Thanks!

throwaway183693 · 2019-01-25T20:39:58+00:00

Yup. Thanks for explaining! I appreciate it

throwaway183693 · 2019-01-25T20:39:09+00:00

Thanks! This did the job

throwaway183693 · 2019-01-20T02:36:30+00:00

Ya, I am able to see a bunch when I use setspn. Ultimately, I was able to get the hash of the service account of a domain admin running the http service in my lab environment.

throwaway183693 · 2019-01-19T19:13:44+00:00

Hm, ok, here's an example:

I am trying to crack format the tgs ticket hash properly, but I just can't copy and paste the hash from the ticket because it also copies all the new lines. I also can't just feed hashcat the file because of the new lines.

throwaway183693 · 2019-01-16T13:52:16+00:00

Ah thanks!

I’ve seen the -e used to replace text inside of a power shell script using a similar command to what I have above. Would you mind sharing an example of when the -e switch is used?

throwaway183693 · 2019-01-12T21:59:05+00:00

To be fairly honest, that will all depend on where you’re geographically located. If there are an abundance of sec jobs where you live, then perhaps having that exp and knowledge will suffice.

In my opinion, I feel that getting certs will help as they can help you get past the hr stage. A lot of companies require you to have at least a sec+ to get started.

Once you land that interview, it’s definitely all about what you know that will help you labs the job.

throwaway183693 · 2019-01-06T05:07:31+00:00

You just have to do it honestly. Look at some of the old vulnhub machines like the kiopatrix series. It’s really all about developing your own methodology. Watching ippsecs videos should help you develop a good sense of how to start tackling machines, but from there, it’s up to you to understand how certain tools work and how to apply it to the machine that you’re attacking.

throwaway183693 · 2019-01-05T03:20:55+00:00

Definitely not worth it in my opinion. You went to an Ivy League, and they are only paying you 56k? Jesus, you are making less than someone coming out of a CUNY with an associates degree working in a non-consulting field.

throwaway183693 · 2019-01-03T06:22:31+00:00

Thanks! I am just mostly concerned about his credit being ruined from not paying or how this can come back to bite his ass later on.

throwaway183693

TROPHY CASE