• lockboxx
• def con
• grimmcon
• infosec conference
• infosec oasis

2 min read 2022-01-01 11:24:00

Conference Review: GRIMMCon 0x6

This past Wednesday I got to attend at GRIMMCon 0x6. This was a free virtual conference put on by the good people at Grimm Cyber R&D. For those

• lockboxx
• advent of code 3
• aoc3
• tryhackme

2 min read 2021-12-29 01:17:00

Course Review: Advent of Cyber 3

Advent of Cyber 3, by TryHackMe (THM), is an awesome 25 day course they released in December of this year. The course was designed to give students

• lockboxx
• cptc
• le bonbon croissant
• lebonboncroissant
• regionals

3 min read 2021-12-12 09:07:00

CPTC 2021 - Regional Review

Introduction Another CPTC season is in full swing. This year the theme for CPTC is Le Bonbon Croissant, a French candy factory similar to Wily

• lockboxx
• book review
• data analysis
• factfulness
• graphs

2 min read 2021-12-01 11:55:00

Book Review: "Factfulness"

"Factfulness: Ten Reasons We're Wrong About the World and Why Things Are Better Than You Think" by Hans Rosling, Ola Rosling, and Anna

• lockboxx
• blue team
• blue team toolkit
• book review
• computer network defense

1 min read 2021-11-18 23:29:00

Book Review: Cybersecurity Blue Team Toolkit

"Cybersecurity: Blue Team Toolkit" by Nadean H Tanner is an interesting introduction to many of the concepts and tools in modern

• lockboxx
• adversarial tradecraft
• keyloggers
• playing in tactic

1 min read 2021-11-04 14:06:00

Notes on Keyloggers

I was recently on a really fun show, Playing in Tactic with Justin Elze, Bryson Bort, and George Orchilles. The following are some notes I was

• lockboxx
• burp suite
• training
• wesley thijs
• xss rat

1 min read 2021-10-23 08:14:00

Couse Review: "Burp Suite: In Depth Survival Guide"

"Burp Suite: In Depth Survival Guide; Master The Art Of Burp Suite Now" by the XSS Rat aka Wesley Thijs aka Uncle Rat is a modern bug

• lockboxx
• charlatan
• fake rce
• fraud
• infosec

1 min read 2021-10-19 05:05:00

The Shenanigans of Jonathan Villareal

This post is about Jonathan Villareal aka Jonathan Scott aka Jonathan Lee aka Jonathandata1. This man has been engaging in some extremely strange

• lockboxx
• book review
• crimedotcom
• geoff white
• hacking

1 min read 2021-10-14 18:29:00

Book Review: "Crime Dot Cime"

"Crime Dot Com: From Viruses to Vote Rigging, How Hacking Went Global" by Geoff White was an interesting book on the evolution of cyber

• lockboxx

1 min read 2021-09-17 21:40:00

The Incident Responder's Bias

One thing I've been thinking about this last year, is that the people who work in security professionally are likely hyper exposed to information

• lockboxx

1 min read 2021-09-15 02:08:00

Book Review: "The Poisoner's Handbook"

"The Poisoner's Handbook: Murder and the Birth of Forensic Medicine in Jazz Age New York" by Deborah Blum was a fascinating book about the

• lockboxx
• cptc
• examples
• hacking
• penetration testing

1 min read 2021-08-27 15:10:00

CPTC - Better Pentest Reports w/ Examples!

This post is intended to help CPTC participants or general penetration testers write better pentest reports, similar to a post I had done earlier

• lockboxx
• 2020 election
• active measures
• cyber symposium
• disinformation

1 min read 2021-08-16 02:09:00

Mike Lindell's Cyber Symposium was a Fraud

Mike Lindell's Cyber Symposium was a long winded "72 hour event" which promised to deliver irrefutable evidence of the 2020 election being

• lockboxx
• actor centric approach
• apt 32
• apt emulation
• detection testing

1 min read 2021-08-12 16:13:00

Approaches to Threat Modeling - With The Hunt for Red Apples

As part of OTRF (open threat research forge) we (@plugxor, @CptOfEvilMinon, @CoolestCatIKnow, @TilottamaSanyal, and myself) put on a threat hunting

• lockboxx

1 min read 2021-08-08 03:54:00

Book Review: "Cyberjutsu"

"Cyberjutsu: Cybersecurity for the Modern Ninja" by Ben McCarty is a fun book applying historical ninja techniques to modern cybersecurity