Problem encountered I had a proxmox server locally running with a disk space of roughly 4TBs. The time came to analyze an unsually large disk image (~1TB). However, by default, when you install a proxmox server, two partitions are created: local and *local-lvm": local is usually automatically assigned ~90-100GB, and this partition is where the root ("/") is mounted. local-lvm gets all the remaining space left on your server. local is a regular directory, and thus you can store any files or folders you want there (containers’ and VM’s backup, IS files, etc.

This was the first edition of BUG PWN Conference. It was a quite fun one. Link to the presentation: C2 servers: From dedicated servers to Telegram bots P.S. Jump from the 20th min to 49th minute (I had a technical issue during the presentation. Don’t worry, you won’t miss anything; I managed to catch up :)

This is a yearly conference organized by Eyesopensecurity. I was privileged to be one of the selected speakers. My topic was “The Art of Hunting down threat actors”. Structure of the presentation: What does a cybercrime investigator do? What are the errors made by TAs? (thanks to which they get caught) Workshop (where I briefly show what this job entails) Links to the presentation: PART 1, PART 2 Apologies, but there seem to be a gap between PART 1 and PART 2.

This writeup is that of the OSINT task of this CTF. OSINT [500 pts] Task description: Catch me if you can TheBox.eml Solution: The email provided (TheBox.eml) can be opened and viewed using Microsoft Outlook or ThunderBird: So, the sender ([email protected]) claims to be writing this email to [email protected] on behalf of Sundar Pichai. NB: This should be flagged as suspicious, because, why would an employee of Alphabet Inc send a business email using their personal email and not a business email (which should be of the form name@companyname.

Hey there! I go by daphnia (yeah, like the microorganism 😅). Currently, I am mostly into OSINT and Forensics (learning bit by bit). These two fields are critical to an investigator. However, I seem to be developing an interest in web pentesting. I think this is because, during investigations, I often fall on the targets’ websites. However, because I have very limited knowledge in web stuff (not to say ZERO), I struggle to analyze those websites.

P.S. I initially published this article on medium on 19.10.2019. Disclaimer: I am a newbie in the security field. In fact, I am a noob (as rightly said on HTB), so I still got a long and hopefully interesting journey. The following might be quite basics or boring for some of you experts out there, but I hope to get some criticism from you, and why not reach other newbies like myself.