Rocky - DEV Community

Rocky

Sep 6

The 30-Line Script That Ended a 2 AM Alert Flood

#cybersecurity #python #soc #infosec

1 min read

Rocky

Sep 6

The Job Posting Says 'Hands-On Experience Required.' Here's How You Get Some Before You Even Apply.

#networking #career #cisco #jobsearch

2 min read

Rocky

Sep 6

The Subnetting Question That Ends Interviews Early

#networking #ccna #career #infosec

3 min read

Rocky

Sep 5

The Scan Column Nobody Reads: SMB Signing and the Difference Between Cracking a Hash and Not Needing To

#pentesting #activedirectory #redteam #infosec

3 min read

Rocky

Sep 5

The Field Nobody Told You Was Writable: Mass Assignment in a Normal Update Request

#appsec #pentesting #api #infosec

3 min read

Rocky

Sep 5

The Response That Belonged to Someone Else's Request

#cybersecurity #pentesting #webdev #infosec

3 min read

Rocky

Sep 5

Evil-Twin Wi-Fi: Why Cloning an SSID Still Beats a Year of Security Awareness Training

#cybersecurity #wireless #pentesting #infosec

3 min read

Rocky

Sep 4

The Alert That Looked Exactly Like the Noise It Wasn't

#cybersecurity #soc #blueteam #infosec

3 min read

Rocky

Sep 4

Been working on a Network Engineering track and we're opening enrollment for the live training.

#networking #education

1 min read

Rocky

Sep 4

The SQL Injection That Never Showed Up in a Single Response

#cybersecurity #sqlinjection #pentesting #appsec

3 min read

Rocky

Sep 4

I Did the Math on This Networking Course: About £4 Per Live Session

#networking #career #cisco #education

2 min read

Rocky

Sep 4

Zero Networking Experience, a Live Cisco Cohort, and a Real Internship. Cohort Opens September 14.

#networking #career #cisco #education

2 min read

Rocky

Sep 4

The Internal Segment That Looked Unreachable Because You Scanned It From Outside

#cybersecurity #pentesting #redteam #metasploit

2 min read

Rocky

Sep 4

The Detection Rule That Passed Every Test Except the One That Mattered

#cybersecurity #soc #detectionengineering #blueteam

3 min read

Rocky

Sep 4

The Two-Second Privesc Check Most People Run Last Instead of First

#linux #cybersecurity #pentesting #ctf

1 min read

Rocky

Sep 4

SSRF in APIs: How a 'Set Avatar From URL' Field Becomes Cloud Credential Theft

#cybersecurity #api #appsec #pentesting

3 min read

Rocky

Sep 3

The Sandbox Report Says 'Clean.' The Sample Wasn't. It Just Knew It Was Being Watched.

#cybersecurity #malware #soc #reverseengineering

3 min read

Rocky

Sep 3

Why %0a and %0A Gave Different Burp Responses (And Why That's a Bypass, Not a Bug)

#cybersecurity #appsec #burpsuite #ctf

3 min read

Rocky

Sep 2

The IAM Policy That Passes Every Review, Then Hands Over the Whole Account

#cybersecurity #cloudsecurity #aws #pentesting

3 min read

Rocky

Sep 2

Your Recon Scan Returned 4,000 Subdomains. Pasting Them Into ChatGPT Isn't the Move

#cybersecurity #ai #redteam #pentesting

3 min read

Rocky

Sep 2

Registry Key, Scheduled Task, or Service: What a Malware's Persistence Choice Actually Tells You

#cybersecurity #malware #soc #blueteam

4 min read

Rocky

Sep 2

You Have Low-Priv Domain Creds and a Foothold. Naming a Tool Isn't the Same as Having a Plan

#cybersecurity #activedirectory #redteam #pentesting

3 min read

Rocky

Sep 1

Your Allowlist Trusts Regsvr32 Because Microsoft Signed It. That's the Whole Attack

#cybersecurity #threathunting #soc #blueteam

3 min read

Rocky

Sep 1

You Enabled CloudTrail. That Doesn't Mean You'd See Someone Emptying the Bucket

#cybersecurity #aws #cloudsecurity #incidentresponse

3 min read

Rocky

Aug 31

The Kerberos Ticket Every Domain User Can Request Is Also a Password Cracking Problem

#cybersecurity #activedirectory #pentesting #redteam

3 min read

Rocky

Aug 31

Your Buffer Overflow Payload Didn't Crash It, Because the Bug Was Never a Buffer Overflow

#cybersecurity #pwn #binaryexploitation #ctf

3 min read

Rocky

Aug 30

The Alert You Stopped Reading Is the One That Mattered

#security #soc #blueteam #siem

4 min read

Rocky

Aug 30

The Scanner Passed This App. The Approve Button Didn't Need to Be Clicked.

#security #appsec #pentesting #webdev

3 min read

Rocky

Aug 30

The Invoice Email Had the CFO's Name on It, and the Headers Said Otherwise

#cybersecurity #dfir #forensics #infosec

2 min read

Rocky

Aug 30

The Client Said Everything Was HTTPS, So MITM Testing Wasn't in Scope

#cybersecurity #pentesting #networking #infosec

2 min read

Rocky

Aug 29

The Interview Question Was Just curl -I Against a URL

#cybersecurity #appsec #http #webdev

2 min read

Rocky

Aug 29

The Codebase Was 40,000 Lines and the Engagement Was Three Days Long

#cybersecurity #appsec #ai #pentesting

3 min read

Rocky

Aug 29

The Shell You Don't Migrate Is a Shell You're About to Lose

#cybersecurity #metasploit #redteam #pentesting

2 min read

Rocky

Aug 29

The Kerberoasting Detection Rule That Never Fires

#cybersecurity #activedirectory #soc #blueteam

2 min read

Rocky

Aug 29

The Stored XSS That Got Downgraded to Low

#cybersecurity #appsec #xss #websecurity

2 min read

Rocky

Aug 28

The Input Field That Passed Every SQLi Test

#cybersecurity #appsec #sqli #database

2 min read

Rocky

Aug 28

The JWT Said alg: none and the API Still Said Yes

#cybersecurity #appsec #api #jwt

2 min read

Rocky

Aug 28

Root Inside the Container Isn't Root. Here's What Actually Is.

#cybersecurity #linux #redteam #privilegeescalation

3 min read

Rocky

Aug 28

The Recon Step You Skim Past at 11PM Is the One That Was Interesting

#cybersecurity #pentesting #ai #python

6

3 min read

Rocky

Aug 27

Three Things to Check Before You Ever Run the Suspicious .exe

#cybersecurity #malware #malwareanalysis #blueteam

3 min read

Rocky

Aug 27

The MFA Rollout Didn't Stop Us. The Helpdesk Call Did.

#cybersecurity #redteam #socialengineering #pentesting

3 min read

Rocky

Aug 27

Your First Cloud Pentest Isn't Going to Play Out Like Your Last AD Engagement

#cybersecurity #cloudsecurity #pentesting #aws

2 min read

Rocky

Aug 26

BloodHound Shows No Path to Domain Admin. That's Not the End of the Assessment.

#cybersecurity #activedirectory #redteam #pentesting

3 min read

Rocky

Aug 26

The Alert That Killed Nobody's Machine Is the One You Should Be Worried About

#cybersecurity #soc #malwareanalysis #blueteam

3 min read

Rocky

Aug 26

Your First Internal Pentest Foothold Makes You Want to Dump Every Credential in Sight. Don't.

#cybersecurity #pentesting #redteam #activedirectory

2 min read

Rocky

Aug 25

The HSTS Header You Just Marked 'Pass' Doesn't Protect the Request That Actually Matters

#cybersecurity #appsec #pentesting #webdev

2 min read

Rocky

Aug 25

One Unauthenticated POST Request Was All It Took to Hijack This AI Agent Platform

#security #ai #cybersecurity #opensource

2 min read

Rocky

Aug 25

Your Detection Rules Have Ten Years of Windows Logic and Zero Lines for a Stolen IAM Key

#cybersecurity #cloudsecurity #aws #blueteam

3 min read

Rocky

Aug 25

Your Old Buffer Overflow Tutorial Doesn't Work Anymore, and That's the Whole Lesson

#cybersecurity #pwn #binaryexploitation #infosec

3 min read

Rocky

Aug 24

The Alert Isn't the Problem, Your Third Blank Triage Decision Tonight Is

#soc #blueteam #infosec #cybersecurity

3 min read

Rocky

Aug 24

You Ran the Deauth Attack Correctly. The Client Just Didn't Care.

#wireless #pentesting #redteam #infosec

3 min read

Rocky

Aug 24

The Scanner Came Back Clean. The Discount Code Still Worked 40 Times.

#appsec #webdev #security #pentesting

3 min read

Rocky

Aug 24

Nobody Assigned You This Hunt: Starting From an ATT&CK Technique Instead of a Ticket

#threathunting #blueteam #mitre #infosec

3 min read

Rocky

Aug 24

The Memory Dump Lands in Your Queue. Where Do You Actually Look First?

#forensics #dfir #blueteam #infosec

3 min read

Rocky

Aug 24

The Interview Question That Trips Up Junior Red Teamers: What Do You Check Before Mimikatz?

#redteam #activedirectory #pentesting #infosec

3 min read

Rocky

Aug 23

You Have a Shell as www-data. Now What?

#cybersecurity #linux #pentesting #infosec

3 min read

Rocky

Aug 23

Your SQL Injection Test Isn't Done Until You've Ruled Out Blind

#cybersecurity #sqlinjection #appsec #infosec

3 min read

Rocky

Aug 23

The Clean Scanner Report Is Not the Same As a Clean App

#cybersecurity #appsec #burpsuite #infosec

3 min read

Rocky

Aug 23

Getting a Meterpreter Session Is Not the Deliverable

#cybersecurity #metasploit #pentesting #redteam

2 min read

Rocky

Aug 22

Porting a Detection Rule to a New SIEM Isn't a Copy-Paste Job

#cybersecurity #siem #detectionengineering #soc

3 min read

Writing Debut

Want to connect with Rocky?