Commando VM: The First of Its Kind Windows Offensive Distribution

Commando VM: The First of Its Kind Windows Offensive Distribution


March 28, 2019 | by Jacob Barteaux, Blaine Stancill, Nhan Huynh

For penetration testers looking for a stable and supported Linux testing platform, the industry agrees that Kali is the go-to platform. However, if you’d prefer to use Windows as an operating system, you may have noticed that a worthy platform didn’t exist. As security researchers, every one of us has probably spent hours customizing a Windows working environment at least once and we all use the same tools, utilities, and techniques during customer engagements. Therefore, maintaining a custom environment while keeping all our tool sets up-to-date can be a monotonous chore for all. Recognizing that, we have created a Windows distribution focused on supporting penetration testers and red teamers.

https://www.fireeye.com/blog/threat-research/2019/03/commando-vm-windows-offensive-distribution.html

free network monitoring and analysis tools

The top 10 free network monitoring and analysis tools!

http://www.wireshark.com

Wireshark kicks off our list, being a network protocol analyzer and capture utility. Captured data can easily be sent to another application for analysis, or filtered within WireShark itself.

http://pandorafms.com/?lng=en

If you want to keep an eye on your servers, applications and communications, look no further than Pandora FMS. It can be configured to create alerts based on specific events,nd send notifications to administrators.

http://angryip.org

Angry IP Scanner Scans IP addresses and ports, finding live hosts and providing you with information about them.

http://microsoft-network-monitor.en.s...

When you're looking to capture packet data to analyze network traffic, turn to Microsoft Network Monitor. It has support for over three hundred public and Microsoft propriety protocols, as well as a wireless Monitor Mode.

http://www.telerik.com/fiddler

Fiddler captures HTTP between computers and the Internet to help with debugging. You see incoming and outgoing data, including encrypted HTTPS traffic, allowing you to test your website performance, or the security of your web applications.

http://www.netresec.com/?page=Network...

Network Miner is classed as a Network Forensic Analysis Tool, and is used to capture packets. It then extracts files and images from that data, allowing you to reconstruct your user’s actions.

http://www.colasoft.com/capsa-free/

Another tool for monitoring, troubleshooting and analyzing network traffic is Capsa Free. Not only does it have over 300 protocols, and the ability to create and customize them, but it's dashboard also allows you to see a summary of traffic stays, TCP/UDP conversations, and packet analysis.

http://www.softinventive.com/products...

Total Network Monitor watches over your hosts and services, notifying you when something requires your attention. Its colorful interface lets you see what's wrong at a glance.

http://www.xirrus.com/Products/Networ...

And don't miss Xirrus Wi-Fi Inspector which manages connections, locates devices, detects rogue access points, and has connection and speed quality tests.

http://www.zenoss.org

Lastly, Zenoss Core keeps an eye on your applications, servers, storage, networking and virtualization giving you performance and availability stats. It also has an advanced notification system.

http://technet.microsoft.com/en-us/sysinternals...

The Sysinternals site was created in 1996 by Mark Russinovich and Bryce Cogswell to host their advanced system utilities and technical information. Whether you’re an IT Pro or a developer, you’ll find Sysinternals utilities to help you manage, troubleshoot and diagnose your Windows systems and applications.

Building the Real World from the Academic

Creating documents for an English class can be a challenge. Instead of trying to make up things to write about, I decided to use my real world business decisions and interactions to do the job. At first it just seemed like a simpler way to do a task. But there are side benefits I didn't realize that are coming from the educational experience. I am forced to think and evaluate more closely how the documentation looks and flows. I am also finding that I look at the work from more of a third person perspective. That allows me to be more critical of the content and the idea itself. Personally I think it has been a very good experience and I have learned and gained a great deal about business, from English class. Sandhills Community College has been really great to me. I would recommend that you brush up on your writing skills or just refresh them by taking English 111 and 114 for the boost it will give your critical thinking a writing skills.

Defining Consulting

I was listening to a TED Talks video on Education by Ken Robinson: "How schools kill creativity" today and the speaker on the video says that when he tells a person he works in education, the blood runs from their face, I know exactly what he is talking about. When I am introduced to people at business gatherings and they come around to me and ask what is it you do? I say I am an IT Specialist, and Small Business Consultant, and of course the blood runs out of their faces too. I think this is directly due to the reputation of consultants in enterprises and industry. The long history of consultants costing a fortune and serving little to no real purpose has tainted people's understanding of the purpose of a consultant.

In the instance I am talking about (as a consultant) I am an expert on IT, I know the trends, what is paying off and what isn't. I know what capabilities are out there, what you should pay for and what you shouldn't. It's like having a hunting guide for your first few hunting trips. At some point, you may no longer need me at all. But you may want to have a meeting with me now and then anyway, just to find out what is changing, what is about to die from a disruptive technology displacing it, little things like that.

Today, I am embarking on a little research into what Email Marketing companies are providing and the prices for such services. There are a lot of them out there, but I have decided to narrow my scope down to what I consider a more humanly manageable top five sites people are finding useful. Email Marketing companies also try to act as Contact Relationship Management tools (CRM) for businesses and individuals. In doing so, they are also going to provide several other marketing tools along the way. How they implement them and who is offering what solutions is what I am after here.


This is a blurb from Flex Jobs web site concerning a definition of what a Consultant is.
What are Consulting Jobs?
What are consulting jobs? Simply put, consultants are hired to help companies and organizations pinpoint business problems and trouble spots, help plot an organization’s next move, or generally transform the organization’s work practices to make them more efficient and productive, and less wasteful. Pretty vague, right? Think of it this way: Consultants provide an outside, objective point of view to help organizations spot problems or better their performance in ways that the organization might not be able to see themselves.

The Navy’s newest warship is powered by Linux

The USS Zumwalt will be a floating data center—armed with missiles and robot guns. The USS Zumwalt getting a coat of paint at Bath Iron Works. The ship is exotic in many ways, but it runs on off-the-shelf computing technology. When the USS Zumwalt (DDG 1000) puts to sea later this year, it will be different from any other ship in the Navy's fleet in many ways. The $3.5 billon ship is designed for stealth, survivability, and firepower, and it's packed with advanced technology. And at the heart of its operations is a virtual data center powered by off-the-shelf server hardware, various flavors of Linux, and over 6 million lines of software code. On October 10, I flew up to Rhode Island to visit Raytheon's Seapower Capability Center in Portsmouth, where engineers assembled and pre-tested the systems at the heart of the Zumwalt and are preparing to do the same for the next ship in line, the USS Michael Monsoor—already well into construction. There, Raytheon's DDG-1000 team gave me a tour of the centerpiece of the ship's systems—a mockup of the Zumwalt's operations center, where the ship's commanding officer and crew will control the ship's sensors, missile launchers, guns, and other systems. This article and it's contents are from Ars Technica

Alignment at the Top

Project Management: Alignment at the top from David Davis

I have been trying to get a few certifications recently. One of them was a required certification (security+) to keep my job. While the others are in an attempt to correct a few past mistakes.

.

First lesson is never let your career path be directed by people who don't actually know what your job title means. 

Second lesson is never stay at a site where they refuse to keep up with even the least technology advancements. It will destroy your career and you will be here with me, starting over with a lot of history in systems and networks that fail to actually form a coherent skill set.

Third lesson, if you're not learning you're leaving. Meaning you are on your way out, not only the door of your current job, but out of the career field you are working in. Provided it is in the IT field anyway, but many others are very similar in the continuing education requirement. Make sure that what you are learning is directly related to your career.

Networks what do you need to know to survive?

Routing and switching, VoIP, Security, Wireless

Systems Admin what do you need to know to survive?

Latest Server OS, Backup, Virtual Machines, Email, Industry related applications, Workstation OS

So starting with what has taken place in the last month or so: 

CCNA is the current certification I am working on. I need to know what the voice part of the system is all about and how to make these things work in order to test and make things function. So in the slightly larger picture I am going to try to get my CVOICE but it will require the CCNA to build on. I took a class in December of 2012 on the CCNA and it seemed to cover the first half of the two books the ICND1. So I was a little disappointed with the class. I did manage to get the books and some example tests out of it though. 

Some of the best resources I have found I will list here as well to save a little on the searching.

How to study for CCNA Free