@Capysec Security Research

Note: This is a reupload of a CTF walkthrough from my original website which no longer exists. Today I'll be doing a writeup on the easy difficulty CTF machine "Bounty Hacker" from the cybersecurity training website TryHackMe. As always, we will start with an Nmap scan of the machine. Here we will be running an aggressive service scan with default scripts enabled. I will also sometimes simultaneously run the above scan alongside another nmap scan which will be using the vulnerability script for additional enumeration. However in this case I decided to simply go ahead with the above command. As we can see we have a little bit of information to go off of. We can see the FTP and SSH are both open, with FTP allowing anonymous logon. Just from personal experience I am already familiar with the versions of vsftpd and OpenSSH that are currently running, and I also know that there aren't any publicly available exploits to leverage against them. Considering that this is consid...

Note: This is a reupload of a CTF walkthrough from my original website which no longer exists. Hello all, We will be looking at the now retired HackTheBox machine "Blue" which is regarded as one of the simplest HackTheBox machines available. ENUMERATION: Machine IP: 10.10.10.40 OS: Windows First we start off with an Nmap scan. This is my preferred Nmap scan for HackTheBox machines. If I fail to find anything on the default 1000 port list, I'll run a scan of all 65535 ports. This type of scan can take a minute or two to simply due to the amount of enumeration it is performing on the remote host. If you want to try to speed up the process you can drop the OS (-O) enumeration and add in a -T5 flag. Running this particular Nmap scan on all 65535 ports will take 5-10 minutes sometimes, so be warned. Here are the results of our scan. As we can see, we have a few ports open. Also, if we didn't already know that this was a Windows machine, these port results in particular wou...

This will be my first post in a series of posts summarizing various cyber actors, including APTs, Cybercrime outfits, and Hacktivist groups. I will be mainly discussing the history of the group and their known and documented activities throughout their existence. I plan on making additional summaries of each group that will delve further into their TTPs and other technical information to compliment this summary. The first group I will be discussing is the Evil Corp cybercrime outfit. The group is also known to many by the name INDRIK SPIDER, which was coined by the Cybersecurity company CrowdStrike. I decided to write about the Evil Corp group first due to the fact that they are still very relevant in 2020, as just a few days ago, Symantec published a report discussing a widespread attempted ransomware attack against various U.S. companies carried out by the Evil Corp group earlier this month. Evil Corp is an extremely sophisticated threat actor. They are capable of developing their ow...

 Note: This is a reupload of my writeup of the history of the ZeuS malware from my original website. INTRODUCTION:  Image Source:  https://www.bankinfosecurity.com/zeus-banking-trojan-spawn-alive-kicking-a-10471 When discussing the history of malware, you are more than likely going to hear the same few names over and over again. Conficker, Welchia, ILOVEYOU, Stuxnet, Flame, CryptoLocker, Dridex, and even newer malware like WannaCrypt0r, Emotet, and Maze.  What is left behind but stands atop the lesser remembered malware of the last fifteen years in particular is the ZeuS or Zbot Trojan and its successor, the Gameover ZeuS Trojan. This will be a historical summary of the ZeuS and Gameover ZeuS Trojans, beginning from its initial discovery and ending in the current year.  I will be using a variety of sources for my analysis. This is NOT a technical analysis of the malware, simply a historical account. I plan on writing a full technical analysis of the ZeuS and Gam...

  BACKGROUND: This is my most recent certification that I obtained back in January 2020. I obtained this cert after the Net+ Sec+ and CySA+ certifications. At the time of me taking this exam I had around 2 years of IT experience but no experience working in Cybersecurity. EXPERIENCE: I primarily used Jason Dion's PenTest+ course on Udemy. As I have stated previously, I highly recommend Jason Dion's certification courses.  I watched Dion's entire course while taking handwritten notes on nearly everything. I did this for about 5 days. The next few days I was able to obtain the Sybex 1000 Practice Question book from a friend as a gift. This book while helpful in some aspects, was very similar to the book that I had purchased for CySA+ also from Sybex. The questions are much more difficult than what is on the test, and introduce too much unnecessary information that is not included in the PenTest+ exam objectives. After skimming through the practice question book, I scheduled t...

BACKGROUND: I took this exam with over a year and a half of experience in IT, already having obtained the Security+ certification. I had no experience working in Cybersecurity at the time of me taking this exam. I studied for a month, using various material and techniques to help supplement my studies. EXPERIENCE: I started off by purchasing the CompTIA CySA+ CS0-001 "All-in-One" certification guide from Amazon. I read this book front to back once, and although I do think that it is a fine source of study material, I don't know if I would recommend it. I did not feel like I absorbed as much information from this book as I should have, nor did it feel like a good chunk of the material in the book was relevant to the actual exam.  After that, I purchased Jason Dion's CySA+ CS0-001 course on Udemy. As I mentioned in my Network+ Study guide, I HIGHLY recommend Jason Dion's Udemy courses. I took handwritten notes throughout the entire course and filled up nearly 20 pag...