Secure Universal Cyber Kittens (S.U.C.K)

Recently I attended the ISSA presentation in MN, the description of it: The Power and Potential of Robotic Process Automation. And the Security Risks. Please join us on March 22 nd  as we explore the powerful and emerging Robotic Process Automation technology in regards to what IT security professionals need to know about RPA platforms . Robotic process automation (RPA) is a powerful and emerging technology that streamlines and standardizes many human user processes as well as harmonizes different systems across an organization’s environment. So what do IT security professionals need to know about RPA platforms? Very simply, it is a new attack vector and organizations need to start to understand their risk. Because RPA software interacts directly with business applications and mimics the way applications use and mirror human credentials and entitlements, this can introduce risks when the software robots automate and perform routine business processes across mult...

I've picked up a bit. I think, I've got a ways to go.

 Quick update on my status               I've been taking the  OSCP  PWK  course, kinda crazy how fast things move. This was a good experience that I honestly did not believe I was capable of. It's interesting that the course was in a lot of way easier than I expected, that being said, it is in no way easy. I likely wont pass my first time and the 60 day mark (about two weeks from today) is coming up quick! I'll update this blog and probably do a few walk throughs and work on build an OS from BIOS when I'm done with this.  BROUGHT TO YOU BY YOUR FAVORITE... Peace out for now homies!!!

Bandit 16 Level Goal The credentials for the next level can be retrieved by submitting the password of the current level to a port on localhost in the range 31000 to 32000 . First find out which of these ports have a server listening on them. Then find out which of those speak SSL and which don’t. There is only 1 server that will give the next credentials, the others will simply send back to you whatever you send to it. Commands you may need to solve this level ssh, telnet, nc, openssl, s_client, nmap Helpful Reading Material Port scanner on Wikipedia Okay so per our instructions it seems we need to use a port scanner here. I used nmap here last time and am fairly familiar with it, bandit16@bandit:~$ nmap -sV -p 31000-32000 localhost Starting Nmap 6.40 ( http://nmap.org ) at 2017-08-27 20:04 UTC Nmap scan report for localhost (127.0.0.1) Host is up (0.00063s latency). Other addresses for localhost (not scanned): 127.0.0.1 Not shown: 996 closed ports PORT STATE SE...