Counter Deception

-
Taken from Counter Deception from DefCon 32 Tim Cross & Greg Conti talk.


https://youtu.be/gHqDEMrqTjE?si=GfWtC5JReTqC5M_E

Comments

Post a Comment

Popular posts from this blog

Put a safety on that toggle! Automating SAFE Dynamic Mitigation

-
Image
How to Build tuned Profiles for Dynamic Linux Kernel Mitigations dynamic mitigation functionality was created by AMD engineer David Kaplan, linked here is an article discussing it The recent introduction of "Dynamic Mitigations" for the Linux kernel provides a powerful new capability: the ability to enable or disable CPU security mitigations at runtime without a reboot. This is managed by writing to a special file at /sys/devices/system/cpu/mitigations . While you can do this manually with a simple echo command, a more robust and manageable approach is to use the tuned daemon. tuned is a system service designed to switch between performance profiles, making it the perfect tool for this job. This guide will show you how to create custom tuned profiles to easily manage your system's security and performance posture. ​ Start Somewhere : Create a Custom tuned Profile Creating a custom profile is straightforward. First, you need to create a new directory for...
Read more

Spiderfoot OSINT Scan for Reporting

-
Image
In any Open Source Intelligence (OSINT) investigation, you're faced with two major challenges: collection and analysis . First, how do you gather thousands of data points about a target securely and efficiently? Second, how do you make sense of that mountain of data without spending days manually sifting through it? This post details my modern workflow that solves both problems. I use Kasm Workspaces for a secure, isolated environment, run the powerful SpiderFoot tool to collect the data, and then feed the results to Gemini to create an instant, comprehensive "target primer." Part 1: The Platform - Kasm Workspaces As I've mentioned in my previous post, all my cybersecurity work starts in Kasm Workspaces . For OSINT, this is non-negotiable. Why? Anonymity & Isolation: When I run a SpiderFoot scan, all the network requests (DNS lookups, web scraping, etc.) originate from my server's IP, not my loc...
Read more

Strategic Analysis of Mail.ru as a Cyber, Logistical, and Tactical Backbone for Russian Military Operations

-
Image
    Strategic Analysis of Mail.ru as a Cyber, Logistical, and Tactical Backbone for Russian Military Operations The Convergence of Civilian Infrastructure and Military Architecture In the contemporary landscape of hybrid warfare, the traditional demarcation between civilian telecommunications infrastructure and state military apparatus has been entirely dissolved. The Russian Federation’s invasion of Ukraine has provided an unprecedented, real-world laboratory for observing how domestic technology conglomerates are systematically co-opted to serve strategic, logistical, and kinetic military objectives. Central to this digital militarization is Mail.ru, a foundational component of the Russian internet (RuNet) and the broader VK Company conglomerate. Originally established as a commercial email and web service provider to capture market share during the early expansion of the internet, Mail.ru has evolved into a highly integrated instrument of state power. Today, it underpins an...
Read more