i am a tiny potato and i believe in you. i like to analyze things, solve problems, find answers, cook, bake, travel, and adventure. my tweets are mine. she/her.
I cannot emphasize enough the value of a team documenting their processes and best practices! Things like how to deploy infrastructure, kick-off a new engagement, generate payloads, use custom tooling, conduct deployments, or perform code management all vary by organization. 1/
80% of pentest firms/redteams that I've been a part of don't have operational documentation even close to what was posted of the google translated Conti playbook. I'm part of that problem so lets all #DoBetter#BeBetter#DocumentBetter
A friendly reminder that if you need to sort IP addresses in numerical order by octet, you can use sort -V, which is intended to sort software versions…but works just as well for IP addresses.
sort -V ips.txt
1.9.128.13
1.9.128.17
- - SNIP - -
223.247.130.72
223.255.28.203
TIL about command -v and command -V. Not a 1:1 replacement of which, but in most use cases it gives you the information you were actually wanting instead.
Yes yes yes. New exploits will always happen, so think about the entire attack chain and look at where else you may be able to detect. We should never put all our eggs in one basket in security.
@mx_redmond My fave non-blended fall soup: Italian sausage, white beans, stock, heavy cream, roasted garlic and Parmesan rinds if you have them (but not necessary), dash of crushed red pepper to your preference, and finish with ribbons of kale.