DEV Community

Rocky profile picture

Rocky

Cybersecurity euthanist

He Subnetted Perfectly. By the Third Office, the Routing Table Had 40 Unmergeable Lines.

He Subnetted Perfectly. By the Third Office, the Routing Table Had 40 Unmergeable Lines.

Comments
3 min read

Want to connect with Rocky?

Create an account to connect with Rocky. You can also sign in below to proceed if you already have an account.

Already have an account? Sign in
The Chatbot Blocked \"Ignore Previous Instructions.\" It Still Leaked Data.

The Chatbot Blocked \"Ignore Previous Instructions.\" It Still Leaked Data.

Comments
3 min read
The Bucket Policy Was Locked Down. The IAM Role Wasn't.

The Bucket Policy Was Locked Down. The IAM Role Wasn't.

Comments
3 min read
The AI Said the Endpoint Was Vulnerable. It Was Wrong.

The AI Said the Endpoint Was Vulnerable. It Was Wrong.

Comments
3 min read
The New Server Was Fine. Half the Office Still Couldn't See It.

The New Server Was Fine. Half the Office Still Couldn't See It.

Comments
3 min read
Some Destinations Got Slow, Not All of Them. That's What Made It Take Three Days.

Some Destinations Got Slow, Not All of Them. That's What Made It Take Three Days.

Comments
4 min read
Preparing for a Network Engineer Interview Without Guessing What They'll Ask

Preparing for a Network Engineer Interview Without Guessing What They'll Ask

Comments
2 min read
The AV Label Said Trojan.GenericKD.33705107. That Told the Analyst Nothing.

The AV Label Said Trojan.GenericKD.33705107. That Told the Analyst Nothing.

Comments
3 min read
The Audit Log Confirmed They Got a Shell. It Didn't Say What They Typed.

The Audit Log Confirmed They Got a Shell. It Didn't Say What They Typed.

Comments
3 min read
The Crash Was Inside libc, Not Your Code. That's the Tell.

The Crash Was Inside libc, Not Your Code. That's the Tell.

Comments
3 min read
One Account Requested 40 Kerberos Tickets in Three Minutes. Nobody Noticed for a Week.

One Account Requested 40 Kerberos Tickets in Three Minutes. Nobody Noticed for a Week.

Comments
4 min read
The Race Condition Hiding Behind A Passing Manual Test

The Race Condition Hiding Behind A Passing Manual Test

1
Comments
3 min read
The Network Segment Everyone Called Trusted

The Network Segment Everyone Called Trusted

1
Comments
3 min read
You Found the Same Local Admin Password on Every Workstation. Now What Do You Write?

You Found the Same Local Admin Password on Every Workstation. Now What Do You Write?

Comments
4 min read
The Bug That Hides Between Two Servers That Disagree About HTTP

The Bug That Hides Between Two Servers That Disagree About HTTP

Comments
4 min read
The SOC Interview Question That Isn't Really About PowerShell

The SOC Interview Question That Isn't Really About PowerShell

Comments
3 min read
Stop Retyping the Same Eight Post-Exploitation Commands on Every New Shell

Stop Retyping the Same Eight Post-Exploitation Commands on Every New Shell

Comments
1 min read
The Cable That Took Down the Whole Floor

The Cable That Took Down the Whole Floor

Comments
4 min read
Redistributing OSPF Into BGP Is Easy. Doing It Both Ways Safely Is Not.

Redistributing OSPF Into BGP Is Easy. Doing It Both Ways Safely Is Not.

Comments
4 min read
You Confirmed a SQL Injection. Now What Do You Actually Do With It?

You Confirmed a SQL Injection. Now What Do You Actually Do With It?

Comments
4 min read
Your Brute-Force Alert Has a Blind Spot Called Password Spraying

Your Brute-Force Alert Has a Blind Spot Called Password Spraying

Comments
3 min read
GitHub's Secret Scanning Alert Just Emailed You an AWS Access Key. Now What?

GitHub's Secret Scanning Alert Just Emailed You an AWS Access Key. Now What?

Comments
4 min read
OSPF Is Healthy. The Router Is Ignoring It Anyway.

OSPF Is Healthy. The Router Is Ignoring It Anyway.

Comments
4 min read
Two PCs, Same Switch, Same VLAN, and They Still Can't Talk

Two PCs, Same Switch, Same VLAN, and They Still Can't Talk

Comments
3 min read
The 21st Router Is Where Full-Mesh iBGP Stops Being a Design

The 21st Router Is Where Full-Mesh iBGP Stops Being a Design

Comments
4 min read
The IDOR Test You Passed Was Only Testing One Path Into the Data

The IDOR Test You Passed Was Only Testing One Path Into the Data

Comments
4 min read
Your IOC Matching Script Has Been Returning Zero Hits for a Reason You Didn't Test

Your IOC Matching Script Has Been Returning Zero Hits for a Reason You Didn't Test

Comments
1 min read
One OSPF Keyword and a Subnet Vanishes From the Routing Table

One OSPF Keyword and a Subnet Vanishes From the Routing Table

Comments
1 min read
The Rename Field That Was Actually a Shell

The Rename Field That Was Actually a Shell

Comments
1 min read
Two Switches, One Trunk, and a VLAN That Wasn't Where Anyone Thought

Two Switches, One Trunk, and a VLAN That Wasn't Where Anyone Thought

Comments
3 min read
The Root Cron Job That Was Already Giving You a Shell, If You Looked

The Root Cron Job That Was Already Giving You a Shell, If You Looked

Comments
1 min read
What a Malware Sample Tells You Before You Ever Run It

What a Malware Sample Tells You Before You Ever Run It

Comments
3 min read
The SSRF Everyone Scored as Low Because It 'Only Reaches Internal Stuff

The SSRF Everyone Scored as Low Because It 'Only Reaches Internal Stuff

Comments
3 min read
The Log Parser That Passed Every Test And Still Missed The Attack

The Log Parser That Passed Every Test And Still Missed The Attack

Comments
2 min read
The 'Least Privilege' Policy That Wasn't

The 'Least Privilege' Policy That Wasn't

Comments
3 min read
Twenty Minutes To Decide If It's Actually A Problem

Twenty Minutes To Decide If It's Actually A Problem

Comments
2 min read
It Found The Vulnerabilities. Most Of Them Weren't There.

It Found The Vulnerabilities. Most Of Them Weren't There.

Comments
2 min read
No Alerts Fired. That Was The Problem.

No Alerts Fired. That Was The Problem.

Comments
3 min read
Revoking The Key Didn't Kill The Session

Revoking The Key Didn't Kill The Session

Comments
3 min read
The App Team Swore It Wasn't Them. It Wasn't. It Also Wasn't The App.

The App Team Swore It Wasn't Them. It Wasn't. It Also Wasn't The App.

Comments
3 min read
The Crash Wasn't The Exploit. It Was Just The Crash.

The Crash Wasn't The Exploit. It Was Just The Crash.

Comments
3 min read
Deleting The Security Group Rule Didn't Stop The Attacker. Here's Why.

Deleting The Security Group Rule Didn't Stop The Attacker. Here's Why.

Comments
1 min read
Your Redundant BGP Link Isn't As Instant As You Think

Your Redundant BGP Link Isn't As Instant As You Think

Comments
2 min read
It's Not the Wi-Fi. It's the Subnet You Sized Two Years Ago.

It's Not the Wi-Fi. It's the Subnet You Sized Two Years Ago.

Comments
3 min read
The BGP Neighbor Nobody Caught Because Nobody Was Checking With Anything Other Than Eyes

The BGP Neighbor Nobody Caught Because Nobody Was Checking With Anything Other Than Eyes

Comments 1
1 min read
The 30-Line Script That Ended a 2 AM Alert Flood

The 30-Line Script That Ended a 2 AM Alert Flood

Comments
1 min read
The Job Posting Says 'Hands-On Experience Required.' Here's How You Get Some Before You Even Apply.

The Job Posting Says 'Hands-On Experience Required.' Here's How You Get Some Before You Even Apply.

Comments
2 min read
The Subnetting Question That Ends Interviews Early

The Subnetting Question That Ends Interviews Early

Comments
3 min read
The Scan Column Nobody Reads: SMB Signing and the Difference Between Cracking a Hash and Not Needing To

The Scan Column Nobody Reads: SMB Signing and the Difference Between Cracking a Hash and Not Needing To

Comments
3 min read
The Field Nobody Told You Was Writable: Mass Assignment in a Normal Update Request

The Field Nobody Told You Was Writable: Mass Assignment in a Normal Update Request

Comments
3 min read
The Response That Belonged to Someone Else's Request

The Response That Belonged to Someone Else's Request

Comments
3 min read
Evil-Twin Wi-Fi: Why Cloning an SSID Still Beats a Year of Security Awareness Training

Evil-Twin Wi-Fi: Why Cloning an SSID Still Beats a Year of Security Awareness Training

Comments
3 min read
The Alert That Looked Exactly Like the Noise It Wasn't

The Alert That Looked Exactly Like the Noise It Wasn't

Comments
3 min read
Been working on a Network Engineering track and we're opening enrollment for the live training.

Been working on a Network Engineering track and we're opening enrollment for the live training.

Comments
1 min read
The SQL Injection That Never Showed Up in a Single Response

The SQL Injection That Never Showed Up in a Single Response

Comments
3 min read
I Did the Math on This Networking Course: About £4 Per Live Session

I Did the Math on This Networking Course: About £4 Per Live Session

Comments
2 min read
Zero Networking Experience, a Live Cisco Cohort, and a Real Internship. Cohort Opens September 14.

Zero Networking Experience, a Live Cisco Cohort, and a Real Internship. Cohort Opens September 14.

Comments
2 min read
The Internal Segment That Looked Unreachable Because You Scanned It From Outside

The Internal Segment That Looked Unreachable Because You Scanned It From Outside

Comments
2 min read
The Detection Rule That Passed Every Test Except the One That Mattered

The Detection Rule That Passed Every Test Except the One That Mattered

Comments
3 min read
The Two-Second Privesc Check Most People Run Last Instead of First

The Two-Second Privesc Check Most People Run Last Instead of First

Comments
1 min read
loading...