opsdisk
Joined 7 years ago
Karma
391
Submissions
65
Member since
Dec 29
https://opsdisk.com
View on Hacker NewsRecent submissions
Comment · 3 months ago
https://scan17.com/
Automated network port change detection. Scan17 provides a solution to the question:
So your CTO decides to outsource firewall management - and the vendor carelessly leaves a network port open, exposing your production database. How does your team find out before an attacker?
Think of it as nmap port scan diff-ing. If a network port goes from closed to open you get an email or webhook alert. There is a REST API for automated workflows and privately hosted engines will be supported for some plans. There is a wait-list form on the website if you want to stay in the loop.
If you work in infosec / cyber security and are interested in being an early product designer / beta tester, let's chat! See my profile for how to get in touch.
Comment · 4 months ago
Appreciate the mention wbadart!
Comment · 4 months ago
Actual title is "One Product, Many Pieces", but I changed it to appeal to the technical and engineering audience here.
Comment · 1 year ago
Would love a blog post on how you're using Docker Swarm.
Comment · 2 years ago
If anyone is curious on how this can be abused, here's my "There's no place like 169.254.169.254 - (Ab)using cloud metadata URLs" slides [1] and talk [2] from 2019.
tl;dr - misconfigured reverse proxies allowed cloud metadata URL access across the bigger cloud providers.
[1] https://github.com/opsdisk/cloud_metadata_extractor/blob/mas...
Comment · 5 years ago
This is the biggest infosec-focused collection I've seen https://github.com/0x90n/InfoSec-Black-Friday.
My shameful promotion to level up your SSH tunneling and port redirection game:
* $10 for the interactive lab - The Cyber Plumber's Lab Guide and Access https://opsdisk.gumroad.com/l/cphlab/blackfriday2021
* The accompanying book is free: https://github.com/opsdisk/the_cyber_plumbers_handbook
Comment · 5 years ago
If you're looking at going even deeper into SSH tunneling and port redirection, I recently made The Cyber Plumber's Handbook free: https://github.com/opsdisk/the_cyber_plumbers_handbook
I made it free to the HN community a few years back [1]. There is a paid interactive lab portion (details in the repo) if you are looking for hands-on experience.
Book Overview
This book is packed with practical and real world examples of SSH tunneling and port redirection in multiple realistic scenarios. It walks you through the basics of SSH tunneling (both local and remote port forwards), SOCKS proxies, port redirection, and how to utilize them with other tools like proxychains, nmap, Metasploit, and web browsers.
Advanced topics included SSHing through 4 jump boxes, throwing exploits through SSH tunnels, scanning assets using proxychains and Metasploit's Meterpreter, browsing the Internet through a SOCKS proxy, utilizing proxychains and nmap to scan targets, and leveraging Metasploit's Meterpreter portfwd command.
Comment · 5 years ago
I made this free to the HN community a few years back [1], but decided to make it available to everyone via a GitHub repo. There is a paid interactive lab portion (details in the repo) if you are looking for hands-on experience.
Book Overview
This book is packed with practical and real world examples of SSH tunneling and port redirection in multiple realistic scenarios. It walks you through the basics of SSH tunneling (both local and remote port forwards), SOCKS proxies, port redirection, and how to utilize them with other tools like proxychains, nmap, Metasploit, and web browsers.
Advanced topics included SSHing through 4 jump boxes, throwing exploits through SSH tunnels, scanning assets using proxychains and Metasploit's Meterpreter, browsing the Internet through a SOCKS proxy, utilizing proxychains and nmap to scan targets, and leveraging Metasploit's Meterpreter portfwd command.
Comment · 5 years ago
Nice...looking forward to seeing this evolve!