Posts on redteaming
14 posts on redteaming. Notes from public sources and my own test lab.
The Silent Cry of PLCs: The Cost of Living on 'Default' in Industrial Systems
A deep dive into the world of OT security, legacy protocols like Modbus, and why the 'air-gap' myth is the biggest threat to industrial infrastructure.
Can Your Neighbor’s Smart Bulb Lead to Your Local Network? Pushing the Boundaries of IoT Security
Join Sedat Özdemir as he explores the 'dark alleys' of IoT security, from the dangers of Shadow IoT to unencrypted protocols like MQTT, and why your office coffee machine might be your biggest vulnerability.
A Fox in the K8s Henhouse: RBAC Vulnerabilities and the Art of Container Escape
It's 4:12 AM, and a simple customer-feedback pod is suddenly trying to list all secrets in the production cluster. Let's dive into how over-privileged service accounts and lazy RBAC configurations turn a minor entry point into a full-blown cluster takeover.
Smart Homes, Stupid Mistakes: Leaving the Backdoor Open in the IoT World
Think a tiny smart plug is harmless? From 'admin:admin' nightmares to unencrypted MQTT traffic, let's explore why IoT is the 'Wild West' of cybersecurity and how we can secure these chatty devices.
K8s: Conductor or Vulnerability Factory? Hidden Bombs in YAML Files
Let's talk about the 'dark side' of Kubernetes configurations. From over-privileged RBAC roles to container escapes, here is how those 'default' settings turn into a Red Teamer's playground.
Smart Homes or Digital Minefields? The Invisible Backdoors of the IoT World
Standard vulnerability scanners aren't enough for the world of ARM processors and unpatched BusyBox versions. Let's talk about why you need to dig into the hardware and firmware to truly secure IoT devices.
A Tale of Isolation and Container Chaos: Where Do We Go Wrong While Getting 'Dockerized'?
Think containers are inherently secure? Think again. From bloated base images to secret leaks in layers, let's explore how 'dockerized' applications actually fall apart and how to fix them.
The Dumb Security of Smart Homes: Why Are We Still Living in the 1990s in the IoT World?
Is Shodan really everything? In this piece, we dive into why the IoT ecosystem feels like the Wild West, exploring MQTT vulnerabilities and the 'geeky' reality of firmware analysis from a Red Teamer's perspective.
Making Sense of the Data Heap: Moving to Actionable Threat Intel
Why hoarding threat feeds is useless and how we can climb the Pyramid of Pain using behavioral detection and Sigma rules instead of just chasing IPs.
Small Box, Big Trouble: Let’s Stop Romanticizing Alpine Linux
Think a 5MB container image makes you unhackable? Think again. We're diving into the myths of Alpine Linux and why your container's 'diet' might be making life easier for Red Teams.
Before You Double-Click That File: Becoming a 'Plague' Hunter in the Lab
A deep dive into the fundamentals of malware analysis, featuring personal stories from the field and practical tips on static and dynamic analysis without compromising your host machine.
It's Not Just About the Patch: The Invisible Side of Vulnerabilities and Our 'Margin of Error'
A deep dive into why relying solely on automated scanners is a trap, the reality of business logic flaws, and a walk down memory lane regarding a production incident.