Aarosioninarosion-labs.hashnode.dev·2d ago · 11 min readBabyTwoBabyTwo is a medium-difficulty Windows machine set in an Active Directory environment. The initial foothold is gained through password guessing and the abuse of Windows logon scripts. Privilege escala00
Rrathsarainrr-cyber.hashnode.dev·3d ago · 15 min readHiding Network Connections: Encryption, Onion Routing, and Identity SpoofingNetwork logs from an organisation's perimeter tell an analyst a great deal without capturing a single byte of payload: which hosts communicated, when, over which ports, for how long, and how much data00
Rrathsarainrr-cyber.hashnode.dev·4d ago · 17 min readNetwork Data Hiding: Covert Channels and Traffic ManipulationConsider a packet capture from a corporate network segment: 23 DNS queries in 21 seconds. Nothing about that number is alarming; DNS is background noise on any live network. Two of those queries are w00
JMJohn michael Jadainshadowmaster.hashnode.dev·4d ago · 11 min readCybersecurity for Beginners: Where Should You Start?A practical beginner's roadmap to understanding cybersecurity, developing technical skills, and building real-world experience Cybersecurity can look overwhelming when you first enter the field. You e00
Rrathsarainrr-cyber.hashnode.dev·Sep 18 · 13 min readGNU/Linux: Where Data Hides and How It's FoundA filesystem can tell an investigator that everything is consistent while still leaving data outside the paths that ordinary tools inspect. Hidden filenames are the easy case. More interesting cases i00
Rrathsarainrr-cyber.hashnode.dev·Sep 18 · 15 min readWindows: Where Data Hides and How It's FoundA file called Secret.exe reports 25 bytes on disk. Nothing in Explorer, nothing in a standard dir listing, and nothing in Task Manager disagrees with that number. Run dir /r instead of dir, and the sa00
RRridesh raju bijweinunderstanding-soc-as-a-learner.hashnode.dev·Sep 13 · 8 min readBuilding My First SOC Home Lab with Windows & Kali Linux Using Oracle VirtualBoxIntroduction While learning cybersecurity, I realized that understanding concepts theoretically is only one part of the journey. I wanted to create an environment where I could actually work with oper00
ZTZero Trust Threadsinzerotrustthreads.hashnode.dev·Sep 7 · 5 min readVulnerability, Threat, and Risk Are Not the Same ThingCybersecurity has a vocabulary problem. Words that have specific meanings are often used interchangeably in casual conversation. Three of the most common are: Vulnerability Threat Risk They are relate00
Rrathsarainrr-cyber.hashnode.dev·Sep 5 · 7 min readAnonTestLab: Ten Years, Three Attempts, and One Idea That Wouldn't Let GoTL;DR: the tool is at hashtagrr.github.io/AnonTestLab. The rest of this is how it came to exist. Round one: an idea and no coding experience to build it I got my hands on the Tor Browser almost ten y00
Rrathsarainrr-cyber.hashnode.dev·Sep 3 · 11 min readWindows Memory Forensics: Finding a Live Infection with VolatilityPID 1484 had been running since boot. Nothing about that was unusual: it was Explorer.exe, the process every Windows machine on earth is running right now. What was unusual was the process hanging off00
