So you want to be a penetration tester, security consultant, ethical hacker, red teamer or any other offensive cyber security professional? #3

It's Story time 🙂 For a few summers before I got into the industry I worked at a retail store. On my first day they locked me in the managers office (who was away on vacation) to do some online training. One of the big trainings was about cyber security. This was the funniest thing … Continue reading So you want to be a penetration tester, security consultant, ethical hacker, red teamer or any other offensive cyber security professional? #3 →

Technique, Tool and Lecture #7

Technique: Google Dork for getting results consisting only of IP addresses. You have to include 2 octets but then can use * for the right. For example if I'm looking for data on 103.10.1.1/16 I can do site:103.10.* or site:103.10.*.* Remember * aren't wildcards but they are as close as you'll get. Also remember that … Continue reading Technique, Tool and Lecture #7 →

So you want to be a penetration tester, security consultant, ethical hacker, red teamer or any other offensive cyber security professional? #1

This one is going to be quick, that is because I'm just linking my lecture where I go over where higher education and academia as a whole should move towards as well as provide a general overview of what it means to work professionally within offensive cyber security. Consider this my kick-off post for further … Continue reading So you want to be a penetration tester, security consultant, ethical hacker, red teamer or any other offensive cyber security professional? #1 →

Top 8 Podcasts For Hacking, Privacy, Cyber Security and Penetration Testing

Walk around a lot or drive a lot? Don't let that stop you from continuing your learning. Here is my list of my personal favorite podcasts that have some relevance to my role as a security consultant/penetration tester or peaks my fancy as a privacy and cyber security enthusiast. The Privacy, Security, & OSINT Show … Continue reading Top 8 Podcasts For Hacking, Privacy, Cyber Security and Penetration Testing →

Government Run People Search Tools

People search engines are all the rage at this moment in history. New ones appear online and go offline just as fast. These are the sites like thatsthem.com where you put in a first and last name and you get a list of addresses and other information. What if I told you that there are people search engines to find out where someone lives or who lives at what address completely free and ran by the government? Would you believe me?

Technique, Tool and Lecture #2

Better late than never I suppose. Technique: Not so much a technique this week but a quick little wordlist to get more value from the tool listed below. This is a wordlist for /aspnet_client/system_web/ Link Tool: IIS-Shortname-Scanner A personal favorite of mine because I think there is still more value in this vulnerability that hasn't … Continue reading Technique, Tool and Lecture #2 →

Technique, Tool and Lecture #1

Thursday is upon us! From now on I will do my best to post a new Technique, Tool and Lecture (TTL) or what I call the Tender Loving Care (TLC) of Hackers every Thursday! Without Further ado: Technique: OS Command Execution with Web Application Firewall Bypass using wildcards aka globbing patterns Link I have yet … Continue reading Technique, Tool and Lecture #1 →