Viewing profile — ImpostorKeanu

80/443 is all that's necessary for Headscale as a control server. UDP/3478 is STUN for the embedded DERP. I recommend hosting a distinct DERP server, thus decoupling the control an…

Black Hills Information Security | Senior DevOps Engineer | REMOTE Role focuses on developing and maintaining automation for penetration testing service infrastructure (C2, remote …

Supervisor should supervise.

I'm absolutely hooked on Caddy. Just developed an AITM phishing tool like EvilGinx2. Challenging project, but Caddy's modularity really brings it all together. Need encrypted landi…

Lateral movement and privilege escalation are total wins, tho.

Reminds me of one of my projects: https://github.com/blackhillsinfosec/skyhook Round-trip encrypted file transfer. Uses WASM to decrypt files on the client side. Aims to bypass IDS…

Another interesting point is that VPN providers have access to server-side keys and, obviously, the processes. This just makes the VPN provider the new ISP. There's no guarantee th…

Agreed. Just clickbait garbage.

It's relative to personal preference, economic status, and general logistics. If your living conditions and/or lifestyle support EVs, do the thing if you want. Stick with ICE other…

If this wouldn't have been the most effective "download and open this zip" phishing campaign in history.....

The core of OPs argument is that tracking is bad, not that ID/age verification is bad.

You set an obfuscation chain and then your transfers look all confusing to perimeter controls.