Ransomware Simulation on macOS (Big Sur)

Introduction The GRC section in our organisation wanted to run a ransomware simulation targeting organisation employees. Just like any other corporate environment, most of the employees will be using either Windows or MacOS machines to do their job. We had to target both Windows and MacOS users during the activity. Since windows operating systems is so widespread and most of the ransomware campaigns are targetted at windows users, we dont hear much about MacOS being targetted by ransomwares....

March 20, 2022 · 12 min · Rizal

Wordle Helper Script

What? A small helper script written in python to assist in solving WORDLE of the day. Why? My colleague introduced me to the WORDLE game which is very popular now. I found it very interesting and started solving them everyday. Soon I found it harder to think of words. So I wrote this script to help me solve WORDLE everyday. WORDLE Helper Script Script Demo Help Page: Use the suggest feature to get words with specified number of vowels....

March 18, 2022 · 2 min · Rizal

Shotter - Quickly screenshot list of URLs

What? Shotter - Quickly take screenshots of a list of URLs. Why? During an internal assessment, I wanted a tool to see what web applications are running in range of IP’s. Couldn’t get EyeWitness to work. How? Written in python. Makes use of selenium webdriver to open websites and capture screenshots. To speed up the process of taking screenshots, the script makes use of multiprocessing - WHY?. Why Multiprocessing?...

March 16, 2022 · 2 min · Rizal

ICMP Reverse Command Shell

Introduction This post demonstrates a reverse shell over ICMP which will work on both windows and linux platforms. The idea is to create two different programs, a server program which will run on attacker controlled machine and a client program which when run on a victims machine will connect to the server program. Once connected, the client program will accept commands from server and will reply with the command output. Both client and server will make use of ICMP Echo messages to communicate....

March 16, 2022 · 7 min · Rizal