Blog – Page 2 – take infosec, mix with culture, sprinkle some spice, enjoy.

Posted in Infosec

Sysmon 11.0 released: Spot hidden tracks even better

In the past I wrote a blog post about Process Explorer to find hidden threats on potentially compromised systems. As I said back then, Process Explorer is part of a suite called Sysinternals, which

Posted in HowTo, Infosec

Reading encrypted network traffic & why connection coalescing, session resumption and perfect forward secrecy help

Wireshark is a very useful tool for network troubleshooting, but also for Blue (discover attacks) and Red (sniff secrets) security teams. Nowadays most communication will be encrypted, which makes it

Posted in HowTo, Infosec

Run ARP poisoning attacks with Metasploit and detect them with Wireshark

ARP – the address resolution protocol – is responsible for translating IP addresses into MAC addresses. If your system wants to reach a server on the internet that has the IP address

Posted in HowTo, Infosec

Easy steps for testing your WEP/WPA WiFi with aircrack-ng

In the previous post I explained how to set up your Alfa WiFi adapter to perform security tests on your wireless network. While I was looking up some things for the aircrack-ng suite, I realized that

Posted in HowTo, Infosec

Get Alfa AWUS036ACH USB NIC running on Kali VM to attack wireless networks

For people in IT security who want to perform penetration testing on wireless networks, it is important to have a network adapter (NIC) which supports monitor mode and packet injection. A normal

Posted in HowTo, Infosec

Understanding VirtualBox networking schemes to set up a good and safe lab

People in IT security will most likely need to work and test with different operating systems, versions and software. Nowadays this is a piece of cake, because thanks to virtualization you can run a

Posted in HowTo

Switch keyboard layout via CLI on Linux

When working in lab environments or on a client’s system, the keyboard layout may differ from what you are used to. For example, an English standard keyboard would start with the keys

Posted in HowTo

Converting Unicode into Characters in Word

Compared to good old ASCII, the character set of Unicode seems endless. The challenge is of course to find the right character somewhere in Word’s “Insert Symbol” list. There is

Posted in HowTo

Using OpenSSH on Windows 10 and handling passwords

Windows 10 has a very useful implementation of OpenSSH to build up secure tunnels to remote systems. Compared to a tool like Putty, using the “ssh” command has some advantages, for

Posted in HowTo, Infosec

Threa[d|t] Analysis with Process Explorer

The Sysinternals suite is a toolkit that can be downloaded for free from the Microsoft website. Really all of the included tools (of the many I tried so far) are very helpful for specific purposes