Posts

Showing posts from January, 2025

Not Really Security but Python Related

Image
 The cats auto water bowl filler stopped working but it was being not super easy to diagnose.   Is it a sensor reading issue?   Sensor issue? Pico? Programming glitch?  Power?  Pump? so I added this little 128x32 OLED display to the hacky looking project to show the sensor reading and whether or not the relay should be open or closed for the pump. Then, throw a little hotmelt glue on it to place it somewhere visible...

Todays Quick Fun PenTest Project-and reason for Network Segmentation

Image
 Goal:    to Get to the storage of THAT Raspberry Pi (left circle with a USB drive Plugged in) from this laptop (hotspotted on my phone) through a drop box (right circle) made from a RaspberryPi Zero 2 with a POE Ethernet hat on it.   Essentially the thought was, "If I could gain access to a local network by plugging in this drop box, could I easily gain access to the files on the file share. Topography of the setup for the remote access and resonance.   The laptop and the "drop box" were setup having ZeroTier Nodes.   essentially putting bot on the same network over the internet.    Using Putty and the IP address provided by ZeroTier. I was able to SSH into the drop box remotely:  once in the network I could run an ip addr to find the subnet that the drop box got from the local DHCP server keeping in mind that we want the address of the bridge as this drop bix has 2 purposes.   It is a wireless access point if we are clos...

For Gods’ sake turn on your MFA

 Customer sent a message today “I keep getting these login requests, they are annoying.   Can we stop them?”   Congratulations, your mfa is working.  Bad news is… they have your password.  Change it and everyplace that you use that password immediately.  

Those Old Security Cameras

Image
I had one of those old EOL security camera systems that was not really trust worthy... it went to the internet, the apps were buggy started requiring subscription service. Not very good with encryption or security... I took it off of the network and used a raspberry pi zero to capture the video from the device and then ran ZeroTier for remote monitoring.  Fun little project...