Introduction I’ve decided to migrate from Ghost to Jekyll as my blog’s primary blogging platform moving forward. I’ve been using Ghost nearly five years and it has served me well. I’ve spent the pa...

Introduction If you recall in this post, I (briefly) went over how I was leveraging technologies such as Terraform and Ansible to deploy and provision my attack lab infrastructure. Some folks rea...

Introduction I decided I wanted to learn the daunting topic of Kubernetes, K3s, Pods, things. Don’t get me wrong, I’m still learning. Out of all of the things I have tackled in my career from bei...

Introduction A few weeks ago, this blog post was released by researchers at Mitiga. Their researchers had found an interesting feature in Google Cloud’s use of metadata keys, which could potentia...

Introduction If you’ve been following, in the previous post I detailed how I manage and deploy my personal attack lab infrastructure (dubbed AttackLab-Lite) using Terraform and Ansible - go give ...

UPDATE (3/31/2023) - There is an updated post you can read here which goes over this in much more detail, with published Ansible, Terraform, and Packer code for reference. Introduction Vagrant, ...

Introduction This has nothing to do with threat intelligence about Discord or Elastic Stack, but rather leveraging these platforms as a Cyber Threat Intelligence (CTI) platform. Overview I was loo...

Introduction Sometimes, I like to snoop a little on known phishing sites to see how it operates, how it’s structured… maybe if there are any credentials stored in cleartext that you can snag due to...

Introduction DEFCON has been cancelled! The long-running joke come true. Not all is lost though, including my deposit on a room at Planet Hollywood. My wife and I were pretty bummed given this is m...

Update 6/16/2020: got to some of the items in the retrospective; updated content herein. Introduction Recently, I’ve taken to Terraforming all the things. What better way to learn Terraform than...