{"id":222,"date":"2012-09-21T06:11:29","date_gmt":"2012-09-21T06:11:29","guid":{"rendered":"http:\/\/www.gironsec.com\/blog\/?p=222"},"modified":"2016-03-14T17:56:53","modified_gmt":"2016-03-14T17:56:53","slug":"updates-and-stuff","status":"publish","type":"post","link":"https:\/\/www.gironsec.com\/blog\/2012\/09\/updates-and-stuff\/","title":{"rendered":"Updates and stuff"},"content":{"rendered":"

Wow, what a crazy month. I’ve been up to a lot of things. For starters, I applied to Nessus for a part time vuln research analyst position, beat the phone screen and beat the 3 app challenges they sent me, but didn’t get the job and they gave me no real answer, even when I emailed the head guy and asked for some semblance of an idea as to why I was rejected. The challenge front page asked nicely in the challenge not to publish findings, however I asked nicely for a reason why I wasnn’t picked. Two wrongs don’t make a right, but 3 rights make a left. Spoilers for whoever applies at nessus coming soon.<\/p>\n

Aside from that I got accepted for ToorCon to do a talk on my Keepass snarfer app I was going on about last month.
\nCheck it:<\/a><\/p>\n

As for the snarfer itself, its done. I even made a nice front end for it:
\n\"\"<\/a><\/p>\n

As for showing off the code itself, Here it is<\/a>.<\/p>\n

Today at work it was rather slow. I decided to write my own HTTP Brute Forcer since Brutus shows up on every AV scanner from here to china. I named the program Brutus 2 – Electric Boogaloo. If you get that reference, you are awesome. Here it is side by side with the old one:<\/p>\n

\"\"<\/a><\/p>\n

I love .net. It allows for cranking out apps an an alarming rate. As for source code \/ downloads, I’ve only worked on this app today so I need more time. As it stands, only basic http auth works and its NOT multithreaded (yet). Expect updates soon as well for that. <\/p>\n

So what is that, 4 updates in the future? The keepass snarfer, the brute forcer, spoiling Nessus \/ Tenable’s hack tests, and what am I missing? Oh right, the 0day. I’ve been so busy I forgot to even submit. I do plan on showing it off, but I wanted to go into depth about how I found it, so I’m being rather lazy about it.<\/p>\n

Thats it for now. Have some random pic like usual:
\n\"\"<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Wow, what a crazy month. I’ve been up to a lot of things. For starters, I applied to Nessus for a part time vuln research analyst position, beat the phone screen and beat the 3 app challenges they sent me, but didn’t get the job and they gave me no real answer, even when I […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[4],"tags":[],"_links":{"self":[{"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/posts\/222"}],"collection":[{"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/comments?post=222"}],"version-history":[{"count":6,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/posts\/222\/revisions"}],"predecessor-version":[{"id":1227,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/posts\/222\/revisions\/1227"}],"wp:attachment":[{"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/media?parent=222"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/categories?post=222"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gironsec.com\/blog\/wp-json\/wp\/v2\/tags?post=222"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}