limbenjamin

As more details of the Barracuda ESG 0 day compromise emerge from both Barracuda and Mandiant, it starts to make sense why Mandiant would recommended a complete replacement of all existing devices.

Earlier this week, there was an interesting altercation in Katong.

Congratulations to all 45,137 recipients of the Singapore Police Bicentennial 2020 medal.

Just encountered a rather interesting redirection malware.

As we commemorate Total Defense day, it is poignant to note the link to what is potentially some of the worst falsehoods to be perpetuated in Singapore, contributing in part to the death of thousands of people.

On Jan 9, it was reported that SPH media inflated its daily circulation figures by 10 to 12% of its reported daily average circulation figures.

Apparently, you can now sign documents with Singpass using any of the digital signing partners.

People are up in arms over the fact that some technical sourcer from Meta is paid $100k per annum.

Miracast compatibility for desktops is complicated.

A man has to pay spousal maintenance (alimony) to his ex-wife depending on her future earning capacity, the standard of living enjoyed prior to the breakdown of the marriage and the contributions made by the ex-wife to the welfare of the family.

Apparently, spammers are now using Flash SMS to send their messages.

The MS-500: Microsoft 365 Security Administration, AZ-500: Microsoft Azure Security Technologies and one more exam from a list of 3, were recently stipulated as part of the requirements under the skilling section for companies interested in earning the de…

I started reading about Luna after the crash and the more I read, the more I failed to understand.

I recently had problems using my Yubikey GPG key to SSH from my WSL instance to a linux server.

I wasn't expecting to do yet another SANS course but the opportunity did arise for me to do SEC760 in ondemand format.

The Cyber Security Agency (CSA) posted an advisory about tech support scammers impersonating CSA officers 7 months ago.

I had some issues with automatically creating a service principal to set up Azure Resource Manager in Azure DevOps due to overly strict Azure AD policies resulting in the following error Error encountered: Failed to create an app in Azure Active Directory.

Yubico used to publish a Windows Store application YubiKey for Windows Hello that allowed local non-domain joined accounts to login to Windows simply by inserting the YubiKey.

I have found an interesting method to convert WinExec shellcode.

Pretty interesting how easy it is to spoof the animated hologram thingy in the new Digital NRIC.

Below feedback was submitted to CSA on 11 Oct 2021 in an individual capacity.

Due to the nature of work, there is a vast difference between the skillset of a law enforcement cyber forensics analyst and his private sector counterpart.

Printer Settings User Interface is an executable file that contains functions used by the printer configuration dialog boxes.

Upon completing my COVID vaccination, I was pleasantly surprised to receive a digitally signed vaccination certificate.

I have just learnt something new about how SPF and DMARC interact with each other and the unexpected behaviour that might result from it.

What are the technical requirements to progress in your career in cybersecurity?

If you have a Heroku app that has worked for many years and is suddenly experiencing a Duplicate build version error or if you are following an old tutorial from before 2021 and see the following cryptic error message in the build log. 1 2 3 !

Understanding Windows trust boundaries is important as a penetration tester as security vulnerabilities are usually found at these boundaries.

At first glance, achieving 0 reportable cybersecurity incidents seem to be a commendable achievement.

File history is a backup solution built into Windows from Windows 8 onwards.

We all know about MD5 hash collisions but I have never imagined that so much progress has been made.

Index Forensics - Walking down a colourful memory lane OSINT - Sounds of freedom!

While completing challenge 9 of Flare-On 7, I found a lack of information out there on reverse engineering COM objects.

There are a number of sites out there mentioning that macvlan has a limitation when used with docker or lxc containers.

My hardware token ran out of battery recently.

I recently stumbled across the NTFS Owner Rights security principal.

This is a topic that is not commonly discussed.

4 years ago, I wrote about why we should not use NRIC numbers for authentication.

When conducting Red Team attacks, I believe it is important to use an intelligence-led approach when doing scenario planning.

While trying to write an undetectable event log cleaner, I delved into the NTAPIs to try to prevent Event ID 1102 from being created.

Found a couple of interesting DLL exports while hunting for LOLBAS.

I believe most threat hunters would already be familiar with the Pyramid of Pain.

I have written an OSCP review and a SANS SEC660 review a few years ago.

Most guides out there give a walkthrough on solving individual functions within vulnserver.

I came up with this technique a few years ago and never had to queue for fresh notes for ang bao since.

If you received an email like the one below, would you try out the voucher code and see if it works?

We have all come across malware which overwrites the Master Boot Record (MBR) of a machine, leaving it unbootable.

After looking at the published solutions for FLARE-On 6, I realised that for challenge 11, vv_max, most people used a script to either reverse the AVX functions or to brute force it.

Over the past 3 years, I have attended 3 SANS courses and participated in 3 NetWars events.

Update (9 Jan 2020) The government has announced the decision to make all publications in the Gazette freely available to the public.