Blog

Posts selection

Nullam cursus urna nec tellus interdum sollicitudin. Integer at nisl in lorem cursus tincidunt

How to make a bootable OpenBSD CD

Posted on 9th Jul 2026

Note: this information is probably obsolete. Okay, we've got the snapshot files. Now what? Next, we use mkisofs from cdrecord to create an ISO image. You can get cdrecord from http://cdrtools.sourceforge.net/private/cdrecord.html. It's also in the Ports collection. So, let's assume that you've got...

Detecting OOB interactions in Sentinel

Posted on 6th Jul 2022

Florian Roth on Twitter posted a sigma_hq rule for detecting the use of public tools like interactsh, inspired by Matt Kelly. I adapted it for Sentinel and figured I'd share. let Domains = dynamic([ ".interact.sh", ".oast.pro", ".oast.live", ".oast.site", ".oast.online...

Credential, key, and source disclosure in Thales products

Posted on 13th Jul 2021

Overview ProtectV and KeySecure "Next Generation" VM images include credentials for AWS EC2, ECR, and SES, DataDog API, and New Relic API license key. Several CA keys are also included. Multiple AWS EC2 credentials had near-admin rights, potentially allowing malicious changes to the dev, build,...