Walk with me in this random journey of discovery
This challenge requires that we bypass the login mechanism used on https://03.adventofctf.com. Let's see what Developer tools has to offer. I tried filling in the form with username test password test but I see no activity in Network tab which is odd for HTTP(s) traffic. I went ahead and inspected the source and found a … Continue reading Writeup: Advent of CTF 3 – JavaScript
For the 2nd challenge we are required to bypass the login mechanism used on this webpage https://02.adventofctf.com. This is the page we get when we navigate to the URL. I tried logging in with a random username:password test:test. Since we are logged in as guests, we do not see the flag. Using developer tools, noted that … Continue reading Writeup: Advent of CTF 2 – CookieMonster
We are asked to visit https://01.adventofctf.com to start the challenge. This is what we get when we navigate to the site. A password is required, which we obviously do not have yet. The page hints on finding a flag. Let's check Developer Tools. What immediately catches my eye is the encoded string YWR2ZW50X29mX2N0Zl9pc19oZXJl in the source code … Continue reading Writeup: Advent of CTF 1 – The Source
For the month of December, I'll be taking part in the Advent of CTF challenges created by @credmp and @NOVIhogeschool. The challenges are available here https://adventofctf.com and are released one per day. Let's see how far I can go :). The first challenge took me a minute to figure out. It simply stated: Do you … Continue reading Writeup: Advent of CTF 0
This week was a rather intense one. I offered to be a volunteer trainer for a Network Security Bootcamp whose aim was to provide practical experience to new graduates and prepare them for a job in the Network Security field. At the end of the course, the students are expected to pass several exams among … Continue reading Setting up an IPSec VPN using Cisco Packet Tracer
This was a great read - was glued to it for a couple of days. The story, told by the author, seems so realistic. I could actually picture this happening given the current circumstances. Maggie Castello's depiction as a vulnerable woman yet able to perform her duties in a clear level-minded way despite the odds … Continue reading Book Review: To Kill the President
Whenever someone asks me which cybersecurity book I’d recommend reading, my answer is instantly “The Cuckoo’s Egg”. This book can be enjoyed by both technical and non-technical people not only within the cyber sphere but also other unrelated fields due to its simplicity in explanation and captivating flow of events. It tells a story of … Continue reading Book Review & Summary: The Cuckoo’s Egg
Today was my second attempt on the AWS Certified Solutions Architect Associate exam. My initial attempt was about 6 months ago. I was in a hurry to get it over and done with and despite the fact that I did not feel ready, I went ahead and sat the exam. I found the exam to … Continue reading Passed the AWS Certified Solutions Architect Associate SAA-C01 Exam
I learnt about KringleCon 2 a few days to the submission deadline but decided to attempt it either way. It is based on a series of tasks that you need to complete for an elf to give you tips on how to resolve the main objectives. This year, there were 12 objectives and maybe a … Continue reading KringleCon 2: Turtle Doves Writeup
With a brand New Year, comes new possibilities. Am super happy to be transitioning to the role of a Threat Hunter at a great company in Feb. Am happy with the path my career has taken so far: It has not been an easy ride but has definitely been worth it. As a threat hunter, … Continue reading New Year, New Things
CyberSecFaith 