Author: Anant Shrivastava

Another good run at BlackHat came to an end. I always wanted to write about what goes behind the scenes. This year I was leading the AIH 4-day edition and then was supposed to do a talk on DevSecOps: What why and how. most of it is outlined https://www.notsosecure.com/hackersummercamp-2019/ however I wanted to focus on behind the scene.

I always thought about writing this one behind the scene post but never had a more adventurous trip so hence writing this down this time around.

Continue reading “BH USA 2019 Behind the scenes”

Do you like what you read, What to share it

Recently i was asked to help someone run vagrant ansible combination on windows. Its a fun experiment coz ansible never claimed to support windows as control device and the solution [partial at this point] is a series of workaround and gotcha’s that i have listed so far.
I want to make sure i don’t lose this experiment hence documenting it out in a quick blog post

Continue reading “Vagrant + Ansible on windows: my experiments so far”

Do you like what you read, What to share it

Chris gates at Carnal0wnage wrote a thought provoking article today and raised couple of questions. This topic is something i definitely have been thinking for past couple of years. Here are my thoughts outlined with respect to various questions asked.

Before i answer these let this be very clear, the answers are my own and are not associated with any of my work or company i work for. The below answers are my own and are subjected to change if adequate reasons provided refer disclaimer here. Also the answers are from a point of view of someone who is a pentester, does public disclosures or bug hunting for opensource, did a stint in bug bounty also but i have had very little experience on the other side of bug bounty table i.e. receiving bugs found in my own applications or websites.

Continue reading “Response to : Vulnerability Disclosure, Free Bug Reports & Being a Greedy Bastard”

Do you like what you read, What to share it

TLDR: A wannabe defender trying to reason with the world that only appreciates pentesters

Continue reading “The Glorification of Pentesters”

Do you like what you read, What to share it

Most of the time when we type ipconfig / ifconfig we are looking for a very simple information i.e. what’s the ip address and which interface is up and running.
So here is another simple script that i write in both shell script and batch file format to ensure that i can extract the basic information in quick turnaround.

Continue reading “Helper Script: ip”

Do you like what you read, What to share it

Another Script i wrote long back and have been using to in various capacities.

This script allows you to quickly generate various types of hashes for a specific string.

Continue reading “Pentest Helper Script: Hash Generator”

Do you like what you read, What to share it

TL;DR: 5-line custom iterator over a file and executing command per line.

Here is a custom helper script that i have written and been using for a very long time. Sometimes something so simpler in nature could very well be useful a lot of times that you feel like sharing it out with everyone.

Continue reading “Pentest Helper Script: loop”

Do you like what you read, What to share it