Author Archives: scomurr

MITRE Caldera – Emulating an Adversary

Posted on 11/15/2020 by scomurr | Permalink 0

Perishable threat intelligence – when a new attacker enters the fray or when an existing threat actor changes their tactics, inevitably the various security firms will publish threat [..]

MITRE, OffSec, Security

Pi-hole – Life Changer? Maybe…

Posted on 07/26/2020 by scomurr | Permalink 0

The Internet seems to run on advertising – and that is fair. Companies and individuals need to find a way to monetize their products and data without hiding [..]

Automation, Security, Web Attacks

Practicing JWT Attacks Against Juice-Shop

Posted on 06/23/2020 by scomurr | Permalink 0

I love attending the sessions put on by Black Hills Information Security when I can. Last week, the session was on JWT token attacks which I found very [..]

Security, Web Attacks

OSCP – My Beginning, My Fall, My Rise and My Resources – Just Like Batman

Posted on 06/02/2020 by scomurr | Permalink 0

I officially got notice today (5/26/2020) that I passed my OSCP exam. I am going to keep this light with a focus on study resources as there are [..]

OffSec, OSCP, Security

MCAS – Device Identity via Certificates and Progressive Web Apps

Posted on 04/21/2020 by scomurr | Permalink 0

I have a customer scenario where we needed to explore leveraging certificates in order to identify corporate Windows 10 machines for the purposes of preventing corporate data from [..]

Hack Job, MCAS