In the previous article (https://medium.com/nerd-for-tech/configuring-virtualbox-for-scambaiting-part-1-15da011adea0), we continued the process of cloaking VirtualBox hardware profiles and spoofing MSINFO32 results. Let’s start with the bad news, I lied in the previous article. I’m not going to cover as much information as I promised, as I am still working on some of software…

In the previous article (https://medium.com/nerd-for-tech/configuring-virtualbox-for-scambaiting-part-1-15da011adea0), we walked through what Scambaiting is and some initial steps to help cloak VirtualBox so that it will not instantly tip the game to a scammer. In this article, we will continue the process. As mentioned in the previous articles, one of the things that…

Scambaiting is the art/hobby of wasting scammers’ time by pretending to be a victim so that they waste valuable resources on you instead of an actual vulnerable population. Some famous examples of scambaiters are: Kitboga, ScammerPayback (Peirogi), and Jim Browning who have all made a career at scambaiting while informing…

At my previous employer (FusionX/Accenture), I wrote a tool for RedTeam security people to help attack and exploit vulnerabilities in Jenkins Applications. These attacks are for the most part publicly known, but are time consuming to execute by hand. Accenture has graciously agreed to opensource the project, and I am…

A common use case for Python and web development is the need to coerce a bunch of data into a Python dictionary or list where it will ultimately end up being transferred over the network via JSON, Protobuf, YAML, etc. Of course you can just validate your data, and manually…

TrueNAS uses Network UPS Tool (NUT) under the covers for UPS monitoring, but what if your UPS isn’t supported by NUT? This was the position I found myself in when using an APC BX1500M. These UPS’s are relatively cheap, reliable, and high-quality. It appears that NUT does not currently support…

A couple years ago, I got a great deal on a few Orange Pi R1’s. I’ve always had an affinity for the Orange Pi series of Raspberry Pi clones. They are stupidly cheap, generally solid and tend to have far better hardware features than you would find on a similarly…

TrueNAS has several built in alerting mechanisms, however I wanted the ability to have NAS alerts pushed to my phone via PushOver. To accommodate this, I needed to abuse one of the existing alerting methods to send alerts to my custom script. Of the existing alerting mechanisms, the SNMP Trap…