ENUMERATING SMB SHARES WITH SMBSCAN: A HANDS-ON GUIDE
A wee writeup about the SMB enumeration tool smbscan, which I had recently discovered on GitHub. The post introduces SMB, highlights the functionality of smbscan, and provides practical insights for uncovering hidden shares, finding sensitive files and auditing permissions.
WHO'S WATCHING YOU? SECURITY ANALYSIS OF THE LSC 1080P IP CAMERA FROM ACTION
A wee writeup of a security analysis of an LSC 1080P IP Camera sold by Action. The posts summarise multiple vulnerabilities we could identify including weak encryption of passwords, lack of authentication and inappropriate hardware hardening.
SQL INJECTION VULNERABILITY IN CHURCHCRM (CVE-2021-41965)
A wee writeup of an SQL injection vulnerability I had found within the open-source ChurchCRM CRM software. This vulnerability allows logged-in users to completely compsomise the database.
RECOVERING WIFI SSIDS FROM CHROMIUM'S NETWORK PERSISTENT STATE FILE
In this post, I’ll explain how Chromium’s Network Persistent State file can be utilised to recover SSIDs a suspect has previously been connected to.
A FORENSIC GOLD MINE III: FORENSIC ANALYSIS OF THE MICROSOFT TEAMS DESKTOP CLIENT
In this post, I will look at the abundance of forensic artefacts which can be collected from Microsoft Teams Client on Windows Desktops.
A FORENSIC GOLD MINE II: FORENSIC ANALYSIS OF SIGNAL MESSENGER ON WINDOWS 10
In this post, I will look at the abundance of forensic artefacts which can be collected from Signal on Windows Desktops.
A COMPLETE LIST OF FREE FLIGHT SEARCH APIS IN 2021
In this blog post, I will have a look at freely available APIs for searching flight tickets.
A FORENSIC GOLD MINE I: FORENSIC ANALYSIS OF VIBER MESSENGER ON WINDOWS 10
In this post, I will look at the abundance of forensic artefacts which can be collected from Viber on Windows Desktop.
CRACKING NTLM HASHES ON GOOGLE CLOUD'S NVIDIA TESLA T4 GPU
In this post I will explain how I used a Nvidia Tesla T4 GPU rented from Google Cloud Platform to crack NTLM hashes using hashcat and John the Ripper at blazing speeds.
RUSSIAN RAILWAY (РЖД) API DOCUMENTATION
In this post I will present an API Documentation of the РЖД I had documented over at Postmans documenter and give an example how Python can be used to query data about Russian Railways.
- 1
- 2