Scott Mortimer @ScottMortimer@infosec.exchange

Regex For Noobs (like me!) - An Illustrated Guide

This blog post is an illustrated guide to regex and aims to provide agentle introduction for people who never have fiddled with regex, wantto, but are kind of intimidated by the whole thing.

https://www.janmeppe.com/blog/regex-for-noobs/

Useful Linux Commands

https://github.com/azer/notebook/blob/master/linux/useful-commands.md

~Open Source Security Tool of the Day~

#OSSTotD

Moloch

Full Packet Capture

Large scale, open source, indexed packet capture and search.

https://molo.ch/

Advanced Container Networking using Vxlan, BGP and Wireguard

https://www.flockport.com/guides/advanced-container-networking

Some more goodness about preventing Pass the Hash attacks by limiting workstation-to-workstation comms.

https://apps.nsa.gov/iaarchive/library/ia-guidance/security-tips/limit-workstation-to-workstation-communication.cfm

Using Active Directory, Group Policy, and Windows Firewall to prevent workstation-to-workstation communication

https://medium.com/think-stack/preventing-lateral-movement-using-network-access-groups-7e8d539a9029

~Open Source Security Tool of the Day~

#OSSTotD

The Book of Secret Knowledge

https://github.com/trimstray/the-book-of-secret-knowledge

Worst DNS attacks and how to mitigate them

https://www.networkworld.com/article/3409719/worst-dns-attacks-and-how-to-mitigate-them.html

Why we fight for crypto

https://blog.erratasec.com/2019/07/why-we-fight-for-crypto.html

While glaringly hyperbolic, this editorial points out the way a provider like FB can grab plaintext content from endpoints and circumvent e2e encryption and shows how important it is to use open source solutions instead.

https://www.forbes.com/sites/kalevleetaru/2019/07/26/the-encryption-debate-is-over-dead-at-the-hands-of-facebook/

~Open Source Security Tool of the Day~

#OSSTotD

Anti-Adblock Killer helps you keep your Ad-Blocker active, when you visit a website and it asks you to disable.

http://reek.github.io/anti-adblock-killer/

Engage today in some "adversarial interoperability" and make the WWW a better place.

https://www.eff.org/deeplinks/2019/07/adblocking-how-about-nah

The secrets of the desert aircraft ‘boneyards’

What happens when an aircraft is no longer needed? In the desert dry of the south-western US, vast ‘boneyards’ are homes to thousands of aircraft.

http://www.bbc.com/future/story/20140918-secrets-of-the-aircraft-boneyards

Gotta give this a try someday

"On a computer with a gigabit connection, ZMap can scan the entire public IPv4 address space in under 45 minutes."

The ZMap Project

https://zmap.io/

Umm....because it's a huge target, the keys to the kingdom, and because they can? Is that a TL;DR?

https://www.inforisktoday.com/hackers-abuse-active-directory-a-12825