ImpostorKeanu

5 ms·

1.
by ImpostorKeanu 8mo ago
80/443 is all that's necessary for Headscale as a control server. UDP/3478 is STUN for the embedded DERP. I recommend hosting a distinct DERP server, thus decoupling the control and data planes. DERPer is open source from Tai
2.
by ImpostorKeanu 11mo ago
Black Hills Information Security | Senior DevOps Engineer | REMOTE Role focuses on developing and maintaining automation for penetration testing service infrastructure (C2, remote access, phishing, etc.).
3.
by ImpostorKeanu 11mo ago
Supervisor should supervise.
4.
by ImpostorKeanu 2y ago
I'm absolutely hooked on Caddy. Just developed an AITM phishing tool like EvilGinx2. Challenging project, but Caddy's modularity really brings it all together. Need encrypted landing pages? Just string together a few modules. Need
5.
by ImpostorKeanu 2y ago
Lateral movement and privilege escalation are total wins, tho.
6.
by ImpostorKeanu 2y ago
Reminds me of one of my projects: https://github.com/blackhillsinfosec/skyhook Round-trip encrypted file transfer. Uses WASM to decrypt files on the client side. Aims to bypass IDS.
7.
by ImpostorKeanu 2y ago
Another interesting point is that VPN providers have access to server-side keys and, obviously, the processes. This just makes the VPN provider the new ISP. There's no guarantee that VPN traffic isn't being decrypted and inspected
8.
by ImpostorKeanu 3y ago
Agreed. Just clickbait garbage.
9.
by ImpostorKeanu 3y ago
It's relative to personal preference, economic status, and general logistics. If your living conditions and/or lifestyle support EVs, do the thing if you want. Stick with ICE otherwise. Although, I do have to say that I think EV b
10.
by ImpostorKeanu 3y ago
If this wouldn't have been the most effective "download and open this zip" phishing campaign in history.....
11.
by ImpostorKeanu 3y ago
The core of OPs argument is that tracking is bad, not that ID/age verification is bad.
12.
Show HN: Round-Trip Encrypted HTTPS Exfiltration Tool(github.com)
9 points by ImpostorKeanu 3y ago|1 comments
13.
by ImpostorKeanu 3y ago
You set an obfuscation chain and then your transfers look all confusing to perimeter controls.
14.
Skyhook: A tool for obfuscated file transfers(github.com)
2 points by ImpostorKeanu 3y ago|1 comments