Infrastructure on Shadow Engineering

Iterations of this Site

Sat, 23 Apr 2022 11:30:03 +0000

In 2018 I applied for a position at Google, to start the day long series of interviews I got asked one simple question:

How would you create a secure web page?

I responded at first about securing the host, implementing SELinux, putting SSH on a high port with a certificate, sticking it behind a WAF. I had started to go into detail about the CI/CD pipeline when I was interrupted by the interviewer asking if I had heard of things such as HSTS and HKPI. I confessed that I hadn’t, and knew there must have been a whole world of things that I simply hadn’t had exposure to, so I took a mental note to go away, build myself a website and to try and experiment.

Diagnosing Difficult Network Issues

Mon, 07 Mar 2022 11:30:03 +0000

Background
#

This is the story of a case I worked a long time ago. At the time I was working in an infrastructure development team. We had a VMWare vCenter 5.5 cluster that started as a prototype, but soon became mission critical (as is the way for those systems sometime). Other than overutilising the hardware with random VMs it had been functioning seemlessly with no issues for a long time, and then developed an interesting fault. The vCenter cluster would disconnect from the storage multiple times an hour.

Easter Eggs

Tue, 23 Nov 2021 17:00:00 +1000

As I outlined in Iterations of this Site, this website has been a project for me to learn and experiment. As a part of that I’ve included 10 easter eggs littered around the site in various places, they’re not overly complex, but they provide a chance for others to learn about some of the different elements of the site like I have in building it.

If you’ve uncovered all 10 of them, I’d love for you to let me know, send me a message to my twitter

For those keen on a bigger challenge, I provide the below. Some bafoon has attempted to encrypt a super sensitive file, but it appears they’ve done it in the worst way possible!

Project Chaos

Sun, 04 Apr 2021 11:30:03 +0000

Meet Scarlett Reynolds, a new starting ICT Sales Representative, for a small technology start up named Eigar Technologies, that’s based in Sydney, Australia.

She studied at Arthur Phillip High School in Parramatta, before graduating in a double degree in IT and Business from UTS in 2013. She’s a virgo and her first car was a ‘96 Corolla, and she doesn’t exist.

Neither does Eigar Technologies. In fact, the name Eigar Technologies is a portmanteau of Eiger, a mountain in the Swiss Alps, and EICAR, the test file associated with Antivirus program validation.

Adventures from the Other Side of Phishing

Tue, 01 Oct 2019 00:00:00 +1000

Background
#

I know it may be hard to believe, but this poor looking website above is not the legitimate NAB website, it’s a poor mockery of a NABs internet banking portal based off a phishing kit we’ve seen. How do I know this? Because I made it.

It stemmed from a weird need, we often need to showcase our phishing capability to seniors in the bank and as a good educational piece to students and employees. Depending on who we’re showcasing to we’re either demonstrating how we respond and manage the risk to customers, or educating users for simple things they can identify to determine the legitimacy. It also helps to showcase the other side of the phishers themselves; a lot of people don’t seem to realise what’s being gathered.

Electric Blue - Lessons from a blue team securing Azure

Sun, 07 Apr 2019 17:00:00 +1000

At the end of 2018, NAB built out it’s extensive cloud environment. As a security analyst who had not had a lot of exposure to cloud environments, it provided new challenges and lessons and I wanted to share that with the world. Thanks to Crikeycon and NAB for letting me share those lessons.

Slides: PDF | PPXT

Infrastructure on Shadow Engineering

Iterations of this Site

Diagnosing Difficult Network Issues

Background #

Easter Eggs

Project Chaos

Adventures from the Other Side of Phishing

Background #

Electric Blue - Lessons from a blue team securing Azure

Background
#

Background
#