koins

BluePillSecurity is a blog where I post monthly about deception. Some posts are technical, others strategic, hopefully all are at least mildly entertaining or thought provoking. This month is the culmination of a mini-series of posts that explores using a few different deceptive resources to catch an attacker in an Active Directory environment.

I hope you enjoy!

Hey HN! I'm just getting started on a new project, outlining what I've learned about building a deception program at my current employer. If building a new security capability, especially if that capability is or involves deception, I'd love to know what you think! New posts on the first of every month :)

Thank you! If you do end up building something like it I'd love to know!

Thank you!

And yeah that's a great point; definitely something I'll look to add when I've got some time on my hands :)

Yeah that's certainly another solution. I haven't played around much with the captive portal capabilities of my networking gear but maybe I should

Lol thanks! I strive to bring more nerd-value than real-value :P

Maybe! The problem I was trying to solve was that a 30 character password randomly generated is a pain to type out by hand haha. That said I think having the text would be a step in the right direction

Lol that's awesome

EDIT - I had an idea that I'm currently working through that I like but am a little stuck so taking a break before I revisit. TLDR is to use an ATTINY85 to auto-"type" the password in for folks who bring a laptop and can't scan the QR code. I wrote the Python code to generate the .ino script that would actually do the writing, but I'm having a little bit of trouble getting micronucleus to write the script to the ATTINY without an un/re plug. You can see the WIP on my digispark branch in that repo

Hey HN!

Today I'd like to share what will hopefully be just the beginning of a collection of offensive security tools I write in Rust. I decided to give this a shot because I wanted to be able to generate my own reverse shells for CTFs and the like without needing to rely solely on 3rd party tools.

With a quick change to the config.rs file, you can compile a TCP reverse shell that will point back to your machine whether your target is running Linux or Windows. Linux uses Rust's std::process::Command while Windows uses the windows::Win32 APIs.

Over time I intend to create more tools that use this as a base. Some ideas include: a TCP reverse shell that performs process migration, an obfuscated version for circumventing antivirus, and a staged version. Would love to hear what you think about it!

Happy hacking