Getting ready for NetWars later this month it was time to sharpen my game. Let’s pick the first good Vulhub vm and have a go. Pluck: 1 – looked like a good start, no info what so ever.. lets see how it goes. First let’s run a nmap and discover what service we have to deal […]
There are two ways of doing SSL decrypt, one where you are in control of the end-client, and has the possible to capture the complete key exchange. This is the only way to decrypt cipher with DH in the name. The other is the passive way, and you might have a pcap of traffic and […]
Recently I’ve been working a lot with Wireshark, and in one scenario I had to verify what certificate was used. Exporting the public certificate from a Wireshark it’s pretty easy if you know what to do. First you need to capture the handshake. If you do see the Client/Server Hello messages but no Certification, you […]
I’ve doing this PoC for a customer, and it’s been such a long case I just need to share the essentials. It looks like a lot of people are getting there help from http://kenfallon.com/checkpont-snx-on-ubuntu-14-04-lts-trusty-tahr/ This works find if you use the IPSec VPN blade. But NOT if your using the Mobile Access Blade. And I […]
This is something I’m gonna forget, and as I use this blog as my personal notebook, I need to document this. I’ve had strange issues not being able to send mail from my web server, to a specific domain. Been troubleshooting with the hosting company, and they have tried to whitelist me, but without any […]
Leave a Reply