Small Company Security On A Budget – Part 1
Life is filled with the best of intentions, such as wanting to win the lottery or keep the work emails to a manageable level. Large enterprises have the ability and […]
Blog
Think Of The Children (part 2 – the Second Born)
While researching daycare software online we identified multiple providers / companies that offered daycare software. In this instance we looked at an application that was configured worse than the first […]
Think Of The Children (part 1)
As my wife recently started an at-home daycare, we have done testing of different child activity tracking applications that provide parents with updates about their child throughout the day (e.g. […]
We’ve Been Hacked By Mice!
MouseJack, originally discovered by Bastille, is a vulnerability that affects many wireless (non-Bluetooth) keyboards and mice. An attacker is able to utilize a USB radio device, available for less than […]
Vehicle Personal Information & Exfiltration
I recently purchased a used vehicle from a local dealership, and so far, so good! My Chevy Cruze works as expected, the tires all are round, and I have not managed […]
Systematic Threat Evaluation Methodology – S.T.E.M.
I LOVE security testing. There, I said it. Penetration Testing, Red Teaming, Threat Emulation… I LOVE it all. Looking at a system, learning about the individual components, understanding how they were […]
Tales From The Red Team: Building Winexe
During one of our Red Team Engagements we were able to gain a foothold on our client’s perimeter via default credentials for an uncommon application server. Once we had this […]
The Importance of Egress Filtering
“Egress filtering is the practice of monitoring and potentially restricting the flow of information outbound from one network to another. Typically, it is information from a private TCP/IP computer network […]
Tales From The Red Team: Deploying Kali in Containers in Your Cloud
This is a story from one of our more recent Red Team engagements and what we did after gaining access to the target client’s environment. We breached the client’s perimeter […]
Your Boss Wants You to Write Pentest Blog Posts… Now What?
Oh dear, what have I gotten myself into? I recently started at White Oak Security and I’m getting a different set of pentesting experiences under my belt. Life has been […]