I managed to continue to walk 10k steps every single day in April. It is hard going given the lockdown and most days I do them entirely indoors. It is like the last feature of my exceedingly healthy start to 2020 that I am maintaining.
I needed to use RDPUpload in April and took an evening to patch it for Python3 and introduce some new functions. An equivalent tool to exfil through locked down remote environments was also made but not public facing yet. It felt great to get a bit of on message content out again 😀
My work runs a regular Hackathon event where we share skills and do some collaborative research. It went great and let me help out with a bunch of potential CVEs that could take sometime to get disclosed. I do love this stuff as it is things I never really did elsewhere.
Music has been the saving grace of my lockdown. It lifts the spirit like nothing else.
Keyboard – I bought one before Christmas 2019 and struggled to get time on it until the lockdown. I was able to practice chord shapes and play a bunch of songs out of a chord song book in early April. Even getting as far as coordinating left and right hands together to sort of double up the chords for a richer sound. To be clear; I have no idea what I am doing but it is fun to try!
Guitar – I taught myself to play around 20 years ago but finding time to keep up has been a struggle since having kids. In 2018-2019 I started to get into home recording and I have seen myself practising those skills in the lockdown.
MPD218 & Ableton – This cheeky wee bit of kit lets you assign sounds to buttons and manipulate them. I had given Ableton software a brief go in 2019 but it didn’t make a whole lot of sense. With the arrival of the MPD I sat through a bunch of Ableton tutorials and made a simple dancy track. My intention is to figure out how to make drum tracks on this setup which I have never done before.
My friend was making a video to demonstrate CVE-2020-7055 (an RCE in the WordPress Elementor plugin). It was a bit stark at 3 minutes of silence so I battered out something that felt appropriate over lunch. In the end I gave it to someone else in my team to make something more professional sounding which went on the final video. But I have been listening to what I made on loop for a bit and it isn’t as shit as I initially thought!
Glasgow Defcon (DC44141) went online for the first time via Twitch. With talks from @ZephyrFish (an intro to Red Teaming) and @InfoSec_Paul_M (on blue team phishing detection techniques). While on the stream someone said “toss a coin to sysadmin” so that inspired this 😀
The DC44141 meetup had the pub vibe via an open Discord chat room after the talks. Featuring lots of lovely people.
Brooklyn 99 season 6 on Netflix arrived and was consumed to much joy.
A feature length Red Dwarf episode arrived and was absolutely a joy to behold. I truly appreciate having spent so long of my life in the company of those characters.
I played counter strike: GO more often with great people and had a good time. I feel like I suck a lot less than last month. The game is free on Steam if you want to get hold of it. I have a dedicated server and share the details if you DM on Twitter to @cornerpirate.
I started Half Life 2 Updated which I think is free on Steam. I loved HL2 obviously. This updated version seems to have different or more immersive music and I was in absolute tears of joy about how amazing the feat of engineering that is. They introduced GRAVITY for the first real time into games and had an absolute blast making puzzles. It is inconceivable now that games were not like this before. Truly brilliant and if you haven’t played it in over a decade like me, if not now when?
This month’s audiobooks
How to talk so little kids will listen by Joanna Faber & Julie King. I had not completely finished this in March and eventually got through this by mid April. It was a great book with tonnes of advice for communicating with kids clearly. Sadly the lockdown has regressed most peoples behaviour because we are trapped in pretty tight quarters. Still several of the techniques have reduced the impact of that.
Amazon Web Service by Paul B Richie. I am looking to learn more about AWS and Azure to have more rounded knowledge in those fields. I know bits and pieces but am seeking a few more jigsaw pieces. I am going to be honest. I haven’t gotten far into this and the initial chapter was like listening to someone reading a dictionary rather than inspiring the listener. Ok ok.. I also selected this book in particular because the author is almost my name sake. It might not be fit for the purpose I had in mind.
The amount of crud I am eating is essentially putting on the weight I lost at the start of the year. Now that I am getting towards adjusted to the new lockdown reality I have been able to start reigning that in.
Highlight of the month
This has put a smile on my face. I needed to go and collect medicine. When I wrote in to say I was going AFK. An amazing colleague said “A QUEST!” just before I went out the door I recorded a few bits of the walk.
When I got home I strung them together and threw some music on it. There is now a channel in youtube “Fun with cornerpirate” which maintains a list of two quests so far:
The audio of me speaking is particularly bad because of the wind. When I filtered it out in Audacity using noise reduction it left my voice sounding shrill.. Lesson learned even if it is spur of the moment take out the better microphone which has the fuzzy stuff on it.
I now have the right mic but the wrong app was the lesson from episode two.
I did a talk at Glasgow Defcon (@dc44141) called “Intro(ish) to SQL Injection”. Following on from the actual intro in February this recapped a bit, but went into demos for Blind SQL Injection and then getting a webshell. It went well and as always there is a noticeable bounce in happiness having survived a public speaking gig. You should definitely do it the positives massively outweigh the ph34r. Video of the content captured after the event here:
After my talk I spoke to lots of people at the end but didn’t quite catch all the Twitter handles. Seems the kids these days communicate via Instantgrams which I thought was how they ordered weed? Lovely conversations with: @zenrhe, @TIA568B, @ScottMcGready, and @ddsgerard.
Delivered my first project to a customer in months (having been involved in various non-front line projects). It is natural to see a bit of ring-rustiness in these situations. When the account manager called up our brand new customer they took the time to say “It is honestly the best penetration testing report I have ever seen”. I blushed very hard but am trying to remember that is more of an indictment of the industry average skill at writing down what they did than anything.
I needed to Google something to remember how to do it. The page I found named me in the article. This is good because someone found the drivel I shared valuable enough to pass it on. Shout out to every reader; write your thoughts and share them on a blog. You help yourself and others and your contribution is welcome!
Making music and things again. I bought a piano chord song book and am learning chords. I might get out of the lockdown able to play a brand new instrument!
As well as getting a guitar out more regularly for things like a warning about default passwords :
And ofcourse a covid-19 smells like teen spirit arrangement made in a lunchtime:
Getting Going again!
Counter Strike:GO – I have procured a dedicated server protected by a password. If you want to come and play on a clean server where people are told to play the objectives and say “gg” (or gtfo) then I can hook you up with the details. DM me on twitter @cornerpirate.
What you need to know about business by Roger Trapp. Part of being a penetration tester means I periodically refresh my understanding of businesses and how they operate. I want to ensure that I am using the right language for that audience, and to stick my finger on the right wound to stem the blood when prioritising fixes. You will find a lot of good entry level things in this audio book. Not the best book on the topic I have read but I am really bad at book titles and names so I am no use to tell you what those were :D.
How to talk so little kids will listen by Joanna Faber & Julie King. Part of being a parent is needing to get things done in the face of resistance. With the impending home schooling requirement (I wrote this before #Lockdown) I felt it was useful to delve into this book deeper than I had managed with the real physical book. The essential message is absolutely applicable to everyone you want to speak to. Going to scream the key learning so far:
LISTEN TO AND ACKNOWLEDGE THE FEELING OF THE OTHER PERSON.
DO NOT TRY AND IMMEDIATELY OFFER SOLUTIONS, LET THEM EXPRESS THEMSELVES.
MODEL HOW BY EXPRESSING YOURSELF.
AVOID GIVING DIRECTIVES. TRY GIVING FACTS AND STATING WHAT YOU ARE FEELING.
… there are many more. I have been mixing things from this and the CBT knowledge from last month in talking to my wilful eldest child. While they are not perfect in any way they are now getting far more responsibilities which they are thriving on. Having previously been unable to listen to any instructions, it is now much more harmonious between us. We can genuinely get the time lost on tampers and turn that into playful fun time. A revolution in our relationship while not entirely down to this book it is a definite place to look and start your journey.
Panic Attack – (written pre #lockdown). The flying duck is a local nightclub. It is fantastic and serves a lot of Vegan food too if you like that sort of thing. It is also apparently a nightmare in box with my name on the card. Who knew? I have been there three times before and it has not been a problem. But those times were before all the sleep deprivation and onset of panic attacks. I would still recommend the place to others because it is a fine establishment. In saying that lets delve into my experience:
Before going to DC44141 to talk I took a taxi in to have something to eat. This was not planned. Maybe my brain did not have time to prepare for this to be happening so it decided to remind me.
I had not had much sleep over the previous 48 hours and had been working pretty hard on a customer engagement too. Basically my stress was probably a lot higher than it had been in Jan-Feb for those reasons.
As I walked down the 20 ish steps to the basement bar I was overwhelmed. It was a sensory overload. Sudden suffocating air of deep fat frying. The smell triggering flashbacks to a trauma. Many moons ago I had such a vigorous bout of heartburn it felt like I was about to die.
The lack of natural light bringing on a touch of claustrophobia perhaps didn’t help.
The clincher was the music. It was.. and how to be polite.. utter pish. It was the worst excesses of trying to be laid back jazz while actually being discordant. Purposefully off any sense of rhythm. With some bastard seemingly playing a trumpet with an air horn at any moment when you might have found solace.
In my mind I equate what I experienced with footage of people being tortured with white-noise.
I stuck it out and we ate a meal. I couldn’t really eat but needed a little something.
I am laughing about it now because of how utterly ridiculous the whole thing was. I have been doing the correct things in 2020 to reduce the occurrences and diminish the impact of these. But here I am freely admitting to the sort of party that goes on inside my mind sometimes.
The positives from this situation are: nothing bad happened, my ability to sit in it and stew instead of running away are showing tolerance going up, and I was able to perform after it instead of literally losing a days work after like previous incidents.
Oh and it gave me a fun opening to the talk where I just ranted about the experience. It felt like rocking an open mic night. The folks who usually leave the GCU union when you start your talk all hung around for the 3 minutes of ad-libbing. A possible future career in observational comedy about panic attacks is worth exploring!
Coronavirus Panic #1: so that is all going nuts outside yeah? I am writing this bit in the middle of March (Monday 16th). As yet the UK has done the square total of nothing to prepare it seems. Panic buying has hit home, and yet the schools are all open on the most part.
While I can freak out about going into a basement it turns out I am not overly concerned by a pandemic which is actually a dreadful thing which is entirely outside of my control. I am focusing on my goals and ensuring I have entertainment and a little food in hand in case of a lockdown.
Coronavirus Panic #2: having lived the homeschooling life for a week and a half I think we will be ok. My partner has stepped up to the plate and is doing wonderful things. I love them beyond words.
Highlight of the month
I think the highlight is somehow miraculously managing 10k steps a day despite being locked in doors with motivation waning. Keeping this up is like a little note to trying to remain positive.
Honestly this month feels like it took 2 decades didn’t it? The captain’s log is more disjointed than usual. There are bits from clearly different eons. The things I was doing to tackle my physical and mental health challenges in 2020 were all paying out and contributing to a happy cornerpirate. I have not burned through the reserves yet. However, when a big part was going OUTSIDE to listen to audiobooks and get exercise/sunlight at three points in the day. You can probably assume something is going to give soon since they basically outlawed my coping strategy.
In keeping with noting down the good and the bad briefly each month here is February.
Managed the 10k steps a day challenge for another month. Some days it was hard and other days I was way way over the minimum. Energy levels returning. It was particularly challenging given the run of epic storms battering the country limiting outside time but we got that done folks.
Integrating a little weight lifting and pushups (standing up vs a wall for now) into the mix which have a major effect for me personally when burning calories. Trying to make that habitual as well. Picked up a kettlebell towards the end of the month and it really kicked my ass. Primo bit of kit that and I would highly recommend.
Prepared a talk called “Intro to SQL Injection” for Glasgow Defcon. With January having gone great, I saw that there was no speaker booked and figured why not challenge myself to pull something together over a weekend. Vulnerable LAMP stack created, application and slides pulled together without fuss.
Delivered said talk. Despite a few niggles about the venue layout and the microphone it seemed to go down well. Met some new legends (EHBEHCEH, KathrynMcBain, and laughingFalkor), and saw some returning legends for the first time in ages (wintervirus). Nobody seemed offended if I go for more advanced SQLi next month. So committed to doing round2 in March!
Went on holiday to a log cabin and had a genuinely relaxing time (despite the best efforts of storm Ciara making it a little leaky).
A colleague had a big test and not enough time to fully smash everything so gave me an absolute open goal of an RCE to play with. Not entirely trivial to get working but I managed to get a webshell, then reverse shell out of it at least and get some good onward findings. Felt good 😀
Prepared a talk called “Intro(ish) to SQL Injection” for AbertayHackers after having my presence demanded by Casual_Unknown and akhanhack following what I call my triumphant talk at G3C in 2019. Triumphant because I went for joy, and folks came out smiling. Unfortunately see The Bad section below 😦
I have used a FitBit to track my sleeping pattern in 2020. Fortunately or unfortunately I have no data from 2019 when all I can tell you is “living permanently awake and on high alert” which was unhealthy. By now I have a graph showing sleep quality if not duration improving. In a world of incremental gains I am saying this is definitely the most positive change to see. It is very likely the result of appropriate hydration in the daytime, and the moderate exercise.
Continuing to utilise childcare to get more time with my partner. As the kids get more independent it is absolutely vital to stop the vicious holding pattern we had established where a parent was always on duty.
Finally, over in Audiobook land I listened to almost all of Cognitive Behavioral Therapy: Techniques for Retraining Your Brain. I say book. It is clearly a series of lectures with indicative interviews with patients recorded for you to listen in on. It is helping me have the language and critical thinking required to take 2020 Pirate to a better place.
Cancelling for said “Intro(ish) to SQL Injection” talk the morning off. Woke up. Kid was sick and my partner was sick. It made me feel absolutely awful to cancel something.
In raking though the positives at least more of the content for DC44141 in March had been completed earlier than I would have.
At least I wasn’t cancelling because I had some mad panic attack or anything.
Highlight of the month
My kids are getting a much better version of their dad. While I have always been present and have tried my best. They are getting a more energetic, less sleep deprived version. I am importantly far less shouty than 2019’s immobile and permanently in pain shitshow of a father.
After entirely writing 2019 off as not happening, I resolved to have a better 2020. Turning things around takes planning and effort. Here is the January log.
I walked more than 10,000 steps every day. Establishing a new baseline for my physical health after protracted periods off my feet in 2019. A resting heart rate a few beats per minute lower is not to be sniffed at.
I spoke to lots of friends and family on the phone in the evenings to help me through the 10k steps challenge. Reconnecting a bit with good people I had let myself get isolated from was great.
I drank water like it was going out of fashion.
I kept booze to a few special events when I was out with colleagues or with my wife.
I made sure I went outside every day even if it was a walk around the block.
I attended my first “hackathon” at work and was blown away by the joys of simply being around some utterly lovely people. Listening to colleagues talk about things they have been researching and then a spot of directed bug hunting was brilliant.
My hackathon efforts found a modest vulnerability in a wordpress plugin which I disclosed to the developer and ended with my first ever CVE reference. Go me.
I had some study time due while I prepared for an exam. I refreshed some app testing skills and delved into a few techniques I hadn’t had time to catch up on before. Studying is good for the soul.
I signed up to audible and listened to my first book in roughly 30 minute chunks walking to go get coffee whenever the sun poked out from the clouds.
I travelled solo on a plane twice without freaking out about it. The whole experience of travel had become stressful over recent years. So getting back in the saddle was uplifting.. Get it? Planes.. sky… uplifting?? Hard to please some people.
I sat and most likely failed an exam (but I won’t find out until February). I had a lovely time preparing for it, an uplifting journey, and actually really enjoyed spending a day hacking stuff that was vulnerable. It is in the good column because overall it was positive, and now I will know how to prepare for the next attempt if it is necessary.
Patrick Stewart returned as Jean-Luc Picard. It was like meeting an old boss you love for breakfast (which I also managed this month, and which was also delightful). Two episodes deep the show is going strong.
Dr Who returned with a flurry of brilliant episodes which generally entertained.
A panic attack while sat about to eat dinner with my colleagues the night before that hackathon I mentioned.
I clearly but politely said “I am off folks” and then spent the rest of the evening breathing cold night air. Speaking to my partner on the phone and playing guitar in my hotel room. It worked. I calmed down. Improving my ability to cope with and recover from the situation is important.
Probable cause of panic? Take your pick. The restaurant was insanely hot. I had spent a long day socialising pretty hard which, when you work from home is pretty rare. I had driven a long way to be there. I was all out of my routine etc etc.
Highlight of the month:
I had an actual proper date with my wife without the kids. The time when we could not achieve this is coming to an end. We can spend some time together alone which is great. This could be life altering. We had such a laugh and enjoyed a nice meal.
It dawned on me that the task I had originally set myself when I joined Pentest Ltd (Now Secarma) back in 2015 have been met, delivered and exceeded.
I wanted to create a penetration testing team and provide a new route for graduates in Scotland. Instead of mostly relocating to England for a career I sought to ensure there was a place for people wanting to stay nearer to home.
Three years on the industry up here is in rude health. Now Context, NCC, and Pentest Partners have offices too. Not that I am taking credit for those. It has been glaringly obvious to me that Scottish universities have been hurtling out talent for years that probably would have preferred to remain in Scotland if they could.
What is true is that there are plenty of options for the next generation and that is basically what I wanted to achieve so thanks guys 😀
Always leave people on a song right? So I resigned with All along the watchtower yesterday:
* Edit. At some point the file upload got lost so restored the post to its former glory.
I wish Secarma all the best in their future endeavours. They are a talented group, and they are kicking on and looking to do exceptional things.
What gets me out of bed in the morning is to help people. Helping customers secure their assets, and helping colleagues to do more personally and professionally. Both of these are vital to me.
I could certainly of continued doing these at Secarma. However, I saw my three year anniversary come and go this month and simply assessed that job I was hired for as being complete.
Now I am seeking new opportunities. My experience:
I have found, trained, and managed penetration testing teams for the last 5 years.
I am still an active penetration tester with 13 years experience.
I am based in Glasgow.
I am available from sorta mid November after a bit of self reflection/home renovation.