#hack100days: day 50 : Grrr. Yesterday was actually day 49. Anyways. Signed up for zeropointsecurity.co.uk Certified Red Team Operator course. LFG! #RedTeam #infosec #PrimumNonNocere

#hack100days : day 48 : even more #rust. Read some on chapter 5. Watched a couple of videos by @[email protected] on his No Boilerplate YouTube channel. Poked around on crates.io a bit and looked at some code.

#hack100days : day 48 : re-read chapter 4 of Rust Programming Language. Ownership, borrowing, and slices, oh my. Moar examples will be needed.

#hack100days : day 47 : Read a bit more about rust. Started in on Chapter 4 of The Rust Programming Language. Still not grokking why there is a mutable/immutable setting for variables. Seems there's no difference between an immutable variable and a constant.

#hack100days : day 46 : Read more rust. (Today was a travel day, so not so much hands on keyboard today)

@JohnRadcliff @Render @Dane @AkomoCombine @ecksmc @th3j35t3r @kel @voltronic Yeah, yeah, twitter an all that, but about 4 tweets in is relevant to this thread... https://twitter.com/bmariner/status/1625237692714983424

@Alfred are you really ChatGPT?

@Render @Dane @AkomoCombine @ecksmc @th3j35t3r @kel @Alfred @voltronic Holy smokes! "Packets find a way..."

@Dane @Render @AkomoCombine @ecksmc @th3j35t3r @kel @Alfred @voltronic I've not had to crack that nut. Too late to switch to BNC?

#hack100days : days 43 & 44 : Forgot to post yesterday. Modified a BadUSB/Rubber Ducky script to run PowerShell and feed a file. Helping out a #BlueTeam analyst w/that one. Helped myself for a future #RedTeam exercise. Also spend some time w/'hello, world', Rust, and Windows OS. Baby steps, time will tell w/that one. Tried out a different format for attack trees, but haven't tried it out on anyone yet. #InfoSec #LabItUp #CamelCaseTags4OnScreenReaders #CoSoSec

#hack100days : day 42 : Listened in on N00bie Tuesday by Alh4zr3d@twitter. Someone mentioned Zero Point Security has a "Rust for n00bs" [[https://training.zeropointsecurity.co.uk/courses/rust-for-n00bs]] class. I'm a n00b, so ran full-tilt into that rabbit hole. An inexpensive introduction. Rust has some interesting quirks. Tried it out on MacOS. Next up, Windows. #InfoSec #LearnToCode #Rust #CoSoSec

#hack100days : day 41 : Tinkered around with Docker some more. Experimenting with building an image w/enumeration tools. Getting rust onto the system for feroxbuster has me a bit stymied. #infosec #enumeration #cososec

#hack100days : day 40 : Took a crack at today #HtB new release, interface. Web app, natch. Started my process and used the usual tools. Didn't get very far at all. Based on tech found, did some research and found an article about one of the components. Calling it a day though and will take a look tomorrow. #ctf #infosec #cososec

#hack100days : day 39 : *Now* I have a working virtual gateway in my virtual lab. Ubuntu w/iptables rules, ftw. Next, write a "shields up/shields down" script governing rules for the inside LANs. Time to grind on payloads! Ah, and it's beer o'clock. #redteam #labitup #infosec #cososec

#hack100days : day 38 : Not much direct hacking today. Read a couple of articles on Azure/M365 hacking. A family friend is making a career transition to software development. Their code made it into GitHub, so I looked through it to practice code-review skills-ish. #infosec #cososec

#hack100days : day 37 (delayed report) : More work on the lab. Migrated target vm from old hacktop to new. Poked at virtual firewall some more to get the lab network sorted. #labitup #infosec #cososec

#hack100days : day 36 : More work on lab infra. Followed this cookbook on dockerizing CobaltStrike: https://ezrabuckingham.com/blog/containerizing-red-team-infra/ Worked! Docker networking is still a little weird for me, so I need to figure out how the beacons are going to get there. The client piece worked, so halfway there. Still need to test the fw--it seems to be grabbing my laptop's IP, which creates network weirdness. May bail and use something I'm more familiar with. #redteam #labitup #infosec #cososec

@Catman720 Probably time to make them back up their tax breaks with matching cuts in spending.

@chrisfu It depends a lot on what's going on during the week. The range is probably 0-8 hrs/week, give or take a couple of hours.

I use the lab to test out ideas, test tools I'm not familiar with, and validate some basic assumptions before I move them into a "real" [Red|Purple] test in the work-world.

(I may move to pfsense. Opnsense is not behaving in a way I expected. It's been a while since I played with this. I want more instrumentation, otherwise I'd just go w/an ubuntu box w/ipfw.)

#hack100days : day 35 : Worked on the hacktop lab. Created a "Private" net for the targets to reside in. Build an OPNSense virtual firewall to govern access between the "External" net--where the attacking hosts are going to reside--and the target network. ...maybe I should rename them. Skimmed the DNS section of the OPNSense manual. Maybe DNSmask let's me try out DNS C2? Next step is to move my target vm from the old hacktop to the new and test fw config. #labitup #redteam #infosec #cososec