0xOPOSEC Christmas Challenge 2022

“Based in Porto, the 0xOPOSEC group was started by g33ks who are passionate about security. The meetup primary mission is to discuss and tackle upsurging security issues by leveraging the expertise and know-how of members of the group.” Index Black Hole {MISC} A Programming Language {MISC} Find The Typo {MISC} Back Me Up! {MISC} 867 CFR {NETWORK} Who’s There {NETWORK} My Network Is Secure! {NETWORK} Mmmm…Donuts… {CRYPTO} Lets Share! {CRYPTO} The Folt {WEB} In Passwords, We Trust, and in PHP, We Believe! {WEB} Who? {TRIVIA} The Great Hack {TRIVIA} Misc Black Hole “An exception is an abnormal event or error that occurs during the execution of a program. Exceptions are typically used to handle unexpected or exceptional co nditions, such as runtime errors or input-output errors. When an exception occurs, it is typically represented as an object that is thrown, and it can be caug ht and handled by the program using a try-catch block.” ...

December 31, 2022 · 17 min

Load Balancing On Webservers with HAProxy and KeepAlived

Index Introduction Presentation Resources Introduction This presentation is about load balancers and how they are important to new infrastructures. The aim here is to learn more about some network protocols (like VRRP) and how can we maximize the uptime when dealing with webservers. Note that this presentation is in Portuguese. Presentation Resources Note that these resources are in portuguese Web application DB Report

October 21, 2022 · 1 min

0xOPOSEC Summer Challenge 2022

“Based in Porto, the 0xOPOSEC group was started by g33ks who are passionate about security. The meetup primary mission is to discuss and tackle upsurging security issues by leveraging the expertise and know-how of members of the group.” Index Larapios Group Access {RECON} Spread Your Hacks {RECON} Big Dollar Spender {WINDOWS} Other Os Are People 2 {RECON} CAPtain Pwn! {LINUX} SO Cute! {LINUX} Stairway To Heaven {WINDOWS} Conclusion First recon Larapios Group Access “Larapios Group states that they access to our core infrastructure! They claim that our security is lacking and have credentials to access our systems. Quickly, grab the access and gain access to one of the internal machines!” ...

August 21, 2022 · 10 min

0xOPOSEC 24/02/2022 Challenge

Index Challenge Description Solving Challenge References Description “I just got this new keyboard from Vodaphone Portugal, but it looks like something fishy is going on. Could you help me?” Solving Opening the pcap file It turns out to be a USB communication capture The file was small and had USB_INTERRUPT events that encode key presses After a little bit of google fu, I found that the Leftover Capture Data field has a series of 8 bytes strung together (the third byte is the Usage ID for the key pressed) ...

February 24, 2022 · 2 min

Using Ansible To Deploy a VM In ESXi

Index Introduction Configuration Create The Playbook Final Result Introduction After configuring ESXi and deploying some virtual machines, I felt the need to automate the process of creating VMs since most of the times I need to spin up a clean machine just for testing some stuff and making the same process over and over again is time consuming and boring. This is why I took some time to learn Ansible, so I could just create a playbook and the VM would be up and running. ...

October 21, 2021 · 4 min