🙏🙏

Singing the Blues:
Taking Down an Insider Threat

"I had all of the advantages. I was already inside the network. No one suspected me. But they found my hack, kicked me off the network...

...and physically hunted me down."

Many pentests start from the outside, wanting to see how the perimeter might be breached.

This pentest started from the inside. My client wanted to assume they had already been breached, and, if breached, how far could an attacker go.

Could they stop me once I was inside?

So they snuck me in. Disguised me as a new employee. Gave me a work computer, an ID badge, an account in their system... hell, I even had a cubicle w/my assumed name on it.

The only person who knew who I really was was their CISO. Everyone else thought I was Jeremy in Marketing.

During most of the first morning, I completed onboarding, made introductions, and completed menial tasks.

But I had to act quick. I only had a week onsite. I had to hack their network while not raising suspicion.

So I set about it.

You have to understand... most "Internal Pentests" are straight forward. The hard part is breaching the network, but once you're inside, it's a target rich environment. End of Life computers, default passwords, everyone a Local Administrator...

You want to buy a house.

You take a loan from the bank.

The bank asks you, “what if you don’t pay back?”

You say, “take my home and sell it”.

(Thread)

That makes sense. The bank gives you a loan and in case you don’t pay, the bank will take over your house and sell it and recover its money.

That’s collateral.

Banks also lend money to big corporations. With them, banks don’t always have collateral.

So a loan where the bank has collateral is considered safer for the bank.

In the early 2000s, the banks in the USA were giving out loans to people for buying houses.

The economy had just recovered from the tech bubble in 2000 where many banks had given out loans to businesses that had shut down.

In that backdrop, the banks found giving home loans safer.

Rhino Barges

One of the dullest, coolest, more bizarre and fascinating pieces of kit used in Normandy.

Which NO ONE REALLY CARES ABOUT.

BUT I DO AND YOU SHOULD TOO.
/1

#WW2 #SWW #History

Planning for Overlord and Neptune had a serious snag, how to get troops from LSTs onto the beach as simply ramming them onto the beaches and dropping the ramp was known to damage the exceptionally vulnerable LSTs and felt to be unsustainable in the mid to long term. /2

LSTs were essential in sustaining Overlord's progress and were a subject of major headaches in the planning phase, and a real subject of friction when it came to launching additional amphibious operations such as Dragoon.

A single LSTs loss represented a capability nick. /3

So, logic dictated, we don't really want these remarkable but rare and highly valuable vessels constantly doing beach landings, we want something to act as a medium between ship to shore, and in came the (mostly) American designed Rhino. /4

I fucking love Rhinos.

Seriously.

Graceful lines of pure industrial pedigree.

Modular.

LOOK AT IT. /5

LACHIT BORPHUKAN : AN UNSUNG WARRIOR OF THE AHOM KINGDOM & THE GREAT BATTLE OF SARAIGHAT

Originally named as Lachit Deca, Lachit Borphukan, the fierce and invincible Ahom Commander, was born during the early 17th century at Betioni in the Golaghat district of modern Assam.

His father, Momai Tamuli Borbarua was the ‘Governor’ of the kingdom and also ‘Commander-in-Chief’ of Ahom army under King Pratap Singha during his reign starting from 1603 to 1639. Lachit received military training from an early age and joined the Ahom King Jayadhvaj Singha...

...(1648-1663) as a scarf-bearer.  The post ‘scarf-bearer’ or ‘Soladhara Barua’ is considered as a part of the incumbent king’s personal staff. Owing to his military training Lechit was appointed "Ghora Barua", Supdt. of the Royal horses. When Chakradhwaj Singha became king..

..of Ahom dynasty in 1663,he appointed him Suptd. of The Royal Guards &finally he was appointed as Borphukan by the king.Then onwards,he was known as Lachit Borphukan.Borphukan used to be top councillor in Ahom Kingdom. This position was embedded with executive & judicial powers.

Assam was facing incessant Islamic invasion since Jan1662, when Mughal General Mir Jumla II attacked Ahom capital Gargaon. He never defeated Ahom king Jayadhwaja Singha as king retreated to hill &continued Guerrilla warfare.Prolonged fight &prospect of stalemate disturbed Jumla.