-
Kali Linux (playing around)
I have been messing with the tools in Kali Linux, and I have decided I need a hard drive on which to test forensics capabilities. I'm guessing I can do a mockup of a hard drive on a usb and practice with that. We shall see. -
CISSP studies: Centralized Access Management
LDAP, Radius, TACACS, Diameter
SSO: Kerberos, SESAME, NetSP/KryptoKnight
Attacks: brute force, dictionary, rainbow table,phishing, sniffing, social engineering, electronic monitoring, emanation
Solutions: otp sync/async, multifactor auth mrm/smart card, user training, IPS, honey pots, pass phrases, pw policies (complexity, age, history, attempts), ( Read more... ) -
Kali Linux Toughbook
I just ordered a Panasonic CF-C1 Toughbook for $149 on eBay. It is one of the semi-rugged ones, and it has some cracks in the plastic, but for $149 (inclusing free shipping), that's amazing. I can duct tape that sucker. Here are the specs as told by the seller:
Panasonic ToughBook CF-C1
Touch Screen
Intel Core i5 2.4Ghz
500GB HD, 4GB Memory
Linux ( Read more... ) -
Attended Webinar - Cybersecurity Risks in Financial Institutions
ISSA Financial SIG Webinar: Understanding the Cybersecurity Risk in Financial Institutions
Multiple initiatives are in place to raise the awareness of financial institutions and their critical third-party service providers with respect to cybersecurity risks and the need to identify, assess, and mitigate these risks in light of the increasing ( Read more... ) -
CISSP study - Authentication
Have, Are, Know
identify, validate
FRR (type 1)
FAR (type 2)
CER - intersection of FRR and FAR
aaa - authentication, authorization, accounting (accountability)
biometrics - retinal scan most intrusive, iris scan most distinctive
user acceptance behavior - more unwilling ybe more intrusive
-
Kali Linux in VirtualBox
I set up a VM in VirtualBox with Kali Linux so I can practice pen testing. I encountered a bug that no matter what I did, NAT mode setup would not work at resolving DNS for VirtualBox. I had to set it up as Bridged mode, and was able to resolve fine.
Needless to say, I got extra practice due to all of the troubleshooting.
-
Signed up for Global Knowledge CISSP bootcamp
Early August timeframe - this will give me some time to review material so I can ask more relevant questions, etc.
-
nmap exploration (useful syntax)
Used Kali Linux box in VirtualBox - practicing using nmap for interesting searches
find live hosts in range nmap -sP 192.168.1.1-100
syn scan scan w/OS detection: nmap -sS 192.168.1.10 -O
open port scan w/version detection (verbose): nmap -sV 192.168.1.10 -A -v
enumerate webserver directories: nmap -script http-enum.nse [host]
scanning for ( Read more... )