Pinned
Looking for a video on a specific hacking technique/tool? Check out ippsec.rocks - Searches over 100 hours of my videos to find you the exact spot in the video you are looking for.
- Ever come across a file running on a Linux box that was deleted from the disk? Did you know you can likely use DD to recover the file without any non-standard tools?
- For the people that hate on "CTF". For what it's worth I have no college degree and prior to 2015, I never held a job in the "security realm". My job became security in 2015 and started my YT in 2016. Pretty much my entire understanding of "hacking" is from playing around on CTFs
- One of the recurring questions I get is "How do you learn all this stuff?". There is no shortcut, just tons of time. At the start of channel my every 30 minutes recorded was easily 4-5 hours of research and reading. That's not including solving the box.
- Inspired by @TinkerSec, I'll tweet out a "hack job" I recently did. I rarely pentest companies, I've always been a blue teamer. The pentest gigs I do are generally favors to other blue team friends to teach them. My rate was $50/h which is much lower than what I typically charge.
- Not the best cable management yet, but happy I finally got the home lab somewhat tidy.
- It always surprises me how much more accessible "hacking" training has become. Just read a story about a Dentist who got OSCP, for no reason other than it sounded fun. No plans to change professions or hack on the side, just wanted to learn the dark arts
- How time flies! Today is my 2 year mark for uploading (almost) weekly videos. Now you can download digital copies of all 113 videos, or 200 hours of content for $10, it's around 200 gigs. patreon.com/ippsec. Sorry to charge, YouTube will always remain free.
- One old motto I've thought a lot about recently is "Practice doesn't make perfect, perfect practice makes perfect". When pursuing a career in video games, I thought about this a lot as if you just grind out games for 12 hours per day. You likely will hit a wall that would
- My first attempt at a Blue Team Video, configure a bunch of Windows Logging: (cmd line, powershell, taskhistory, sysmon) and send it to HELK for analysis/sigma rules. Not BlueTeam? Putting this in reports is sure to impress & helps improves evasion tactics
- Starting to put together a Linux Privesc Video. Can anyone spot something non-network that I'm missing? - Recon (linPEAS/LinEnum) - Sudo - Permission Overview (file writes - sshKey/cron) - SetUID - Kernel - Cron - Network [mysql, postgres, erlang cookie (couchDb)]
- I get asked a lot about avoiding burnout, which is an incredibly tough question to answer because I think a lot of other issues get attributed to burnout. It seems people think a lack of motivation to start something == burn out, which isn't always the case. For me, it's more
- HackTheBox is running a huge pro-lab discount this month. Use coupon code: "weloveprolabs22" and waive the setup fee ($95) of any pro lab. Each pro lab is $27/m, which makes this over 75% off. The coupon expires at the end of the year.
