Cybersecurity professional based in the UK. Enthusiast of nature, chequered shirts and lists of three. Creator of open-source tools like Slack Watchman, GitLab Watchman, Lil Pwny, and more.
In 2023 I wrote a blog post on how you can extract and use cookies from Slack to authenticate to the API, and it has become one of my most commonly viewed articles. Since then, Slack have changed a few things, and I've been doing some deeper digging
Tradecraft
In this post I explain how to use gopass to GPG encrypt and store your secrets locally, then integrate with direnv to decrypt and load your secrets to environment variables in your shell without exposing them in plaintext. In Part 1 of this Secrets Management series I showed you: * How
Slack Watchman
Did you know that Slack provides some surprising information about a workspace to unauthenticated callers? Slack Watchman knows, and in this post I’m going to show you the information you can enumerate from a workspace, and how you can use the ‘unauthenticated probe’ functionality of Slack Watchman to get
Lil Pwny
In this post I show how you can use some of the same tools that attackers use to generate a tailored custom password list to use with Lil Pwny, and find those risky passwords before they do. As the number of data breaches continue to rise, safeguarding your Active Directory
Lil Pwny
I'm excited to announce the release of Lil Pwny 3.2.0, featuring powerful new enhancements to the Active Directory password auditing tool. This update brings significant improvements and new features. Following NIST's recommendation in Section 5.1.1.2 of their Digital Identity Guidelines, Lil
Tradecraft
Many of my tools, such as GitLab Watchman, are designed to find secrets hardcoded or added as files to code repositories. Handling secrets this way is a bad idea for a number of reasons, but the main issue is that it leaves them open to being exposed. In this post,
TryHackMe Writeups
This series of write-ups is for the TryHackMe Room Squid Game, which you can access here: https://tryhackme.com/room/squidgameroom. This time we're looking at the last task - Attacker 5 We will use some familiar applications (oledump, cyberchef and vipermonkey) and a new one (scdbgc). Question
TryHackMe Writeups
This series of write-ups is for the TryHackMe Room Squid Game, which you can access here: https://tryhackme.com/room/squidgameroom. This time we're looking at Task 5 - Attacker 4 For this task we're reusing our old faithful tools: oledump and CyberChef Question 1: Provide
TryHackMe Writeups
This series of write-ups is for the TryHackMe Room Squid Game, which you can access here: https://tryhackme.com/room/squidgameroom.This time we're looking at Task 4 - Attacker 3 In this task we are going to use; oledump and vipermonkey Question 1 Provide the executable name
TryHackMe Writeups
This series of write-ups is for the TryHackMe Room Squid Game, which you can access here: https://tryhackme.com/room/squidgameroom. This time we're looking at Task 3 - Attacker 2 In this task, we're going to use oledump Question 1: Provide the streams (numbers) that
TryHackMe Writeups
This series of write-ups is for the TryHackMe Room Squid Game, which you can access here: https://tryhackme.com/room/squidgameroom. This challenge room is one of the few intended for blue teams on TryHackMe, and is categorised as hard, so I thought I would give it a go. The
Slack Watchman
The new version 4.0.0 release of Slack Watchman contains some major upgrades and new features: Centralised signatures The biggest upgrade, in terms of maintenance, to Slack Watchman is the move to store and pull signatures from a centralised repository GitHub - PaperMtn/watchman-signatures: Signature base for Watchman applications