Improved Canned Air Attacks Against REX Sensors

Bypassing Request-to-Exit (REX) sensors with canned air and other mediums isn’t a new attack, and is widely used as a covert method of entry. However, there are times where this attack could be possible, but certain elements such as a small physical gap that the straw can’t fit through, REX sensor being farther away, etc., … More Improved Canned Air Attacks Against REX Sensors

Proxmark 3 Cheat Sheet and RFID Thief Instructions

Found some awesome write-ups from Alex Dib regarding building your own RFID cloner and a useful Proxmark3 cheat sheet, and wanted to share! Proxmark3 Cheat Sheet Great cheat sheet for those using the Proxmark3 software.   RFID Thief v2.0 Very detailed write-up for building your own long-range RFID cloner.    

Who’s Slide Is It Anyway

Here are some presentations that I made for “Who’s Slide Is It Anyway”, “Slideshow Karaoke”, “Slideshow Roulette”, or whatever else you want to call it. They are pretty random, and a fun play on popular topics and buzzwords within the #InfoSec community. They are meant to be fun and technically inaccurate on purpose, and in … More Who’s Slide Is It Anyway

Make an Incomplete Nmap .xml File Usable Again

Make an Incomplete Nmap Scan .xml File Usable for Rawr and Other Applications That Accept .csv File-types This is a very non-technical how-to for newcomers who have found themselves in a situation where for some reason or another, their Nmap scan wasn’t able to complete. This can be a problem when you were planning on feeding … More Make an Incomplete Nmap .xml File Usable Again

Proxmark3 Resources

Resource to flash the Proxmark3 from the standard HF mode, to LF mode: WINDOWS Download the github proxmark3 standalone LF emulator Master by Corey Harding — Run Easy Flash Utility for Windows .bat This tool is handy for reflashing your Proxmark3 for whatever you need it for Reference: Plug in your Proxmark3 and … More Proxmark3 Resources

OSINT Resources

Here, we are going to document useful tools we utilize during the Open-Source Intellignce (OSINT) phase of our assessments. Feel free to send suggestions of tools/websites that you like to use as well. A wealth of links broken down into different categories. Highly recommended! Excellent starting point! A well-maintained repository of well-known OSINT … More OSINT Resources

InfoSec Nashville

I had a great time speaking at the InfoSec Nashville event! This was my first time attending, and it’s certainly a well-ran conference. It was awesome of them to give my wife and daughter a badge as well, so that they could attend. I presented “Security Guards — LOL!”, and received some very positive feedback. … More InfoSec Nashville