Cyber Warfare Organization exploring the future of network centric conflicts while incorporating the D.I.M.E methodology.
OpenVPN (UDP) DPI Bypass
How does DPI (Deep Packet Inspection) identify OpenVPN in the first place?So to answer that question we have to fully understand what takes place when your packets are scanned by DPI, and how OpenVPN itself is flagged. DPI, not to be confused with SPI (Stateful Packet Inspection), scans both header and the data of a packet. This allows for application data to be filtered or blocked by DPI which is notoriously used in countries like China, Egypt, and other censorship advocating nation states.H...
OpenVPN (UDP) DPI Bypass
How does DPI (Deep Packet Inspection) identify OpenVPN in the first place?So to answer that question we have to fully understand what takes place when your packets are scanned by DPI, and how OpenVPN itself is flagged. DPI, not to be confused with SPI (Stateful Packet Inspection), scans both header and the data of a packet. This allows for application data to be filtered or blocked by DPI which is notoriously used in countries like China, Egypt, and other censorship advocating nation states.H...
SIP Bypass POC
According to Apple, "System Integrity Protection is a security technology in OS X El Capitan and later that's designed to help prevent potentially malicious software from modifying protected files and folders on your Mac. System Integrity Protection restricts the root user account and limits the actions that the root user can perform on protected parts of the Mac operating system. Before System Integrity Protection, the root user had no permission restrictions, so it could access any sys...
SIP Bypass POC
According to Apple, "System Integrity Protection is a security technology in OS X El Capitan and later that's designed to help prevent potentially malicious software from modifying protected files and folders on your Mac. System Integrity Protection restricts the root user account and limits the actions that the root user can perform on protected parts of the Mac operating system. Before System Integrity Protection, the root user had no permission restrictions, so it could access any sys...
Barclay's Red Team Entry Challenge (Delta)
OverviewThe machine didn't require any footholds into the actual box itself. It held a easy web challenege requiring no enumeration apart from active recon. The reversing aspect was a easy/low medium, with the hardest parts being leveraging the decryption function of the .net console application.Path to FlagThe first thing I did was run passive scans on the given IP and look at the certificate. The certificate was a standard "LetsEncrypt" had nothing meaningful. I did more DNS recon and ...
Barclay's Red Team Entry Challenge (Delta)
OverviewThe machine didn't require any footholds into the actual box itself. It held a easy web challenege requiring no enumeration apart from active recon. The reversing aspect was a easy/low medium, with the hardest parts being leveraging the decryption function of the .net console application.Path to FlagThe first thing I did was run passive scans on the given IP and look at the certificate. The certificate was a standard "LetsEncrypt" had nothing meaningful. I did more DNS recon and ...
