ImaginaryBIT

${0 }
${0 == pageList.maxPage}
${1}
${1 eq currentPageNumber }
${5}
${5/6}
${a+1 }
${a.academyName}
${a.academyNumber}
${academyNumber==a.academyNumber}

ImaginaryBIT

lifecycle

NS
Ingress (DNS)
kub network policy (firewall)
kub service (IP table) load balancer/reverse proxy
(((((exe)container)pod)replica)deploy)

kubectl -> kube api service ->  etcd
							kube scheduler

ImaginaryBIT

###############################################################################
################## Solidity Smart Contract source code review #################
###############################################################################

convert bytes to integer
# python pow(2,256)

web3.utils.padLeft('0x3456ff', 64);
> "0x000000000000003456ff"

ImaginaryBIT

$id = get-random
$code = @“
using System;
using System.Threading;

namespace HelloWorld
{
    public class Program$id
    {
        [System.Runtime.InteropServices.DllImport(“user32.dll”)]

ImaginaryBIT

SDLC -> Trust Boundary
risk assessment -> Security Requirements -> Abuse Cases -> Threat Modeling -> Security Architecture (hardware or software) -> SSCR(static) -> Pentest (dynamic)
Security Testing for Agile/DevOps and DevSecOps
- Infrastructure as Code
- Continuous Integration and Continuous Delivery
- security activities are being automated as much as possible

Basic Tampering Techniques
- Binary Patching
- Code Injection

ImaginaryBIT

#define _XOPEN_SOURCE 600
#define _BSD_SOURCE

#include <unistd.h>
#include <termios.h>
#include <sys/types.h>
#include <sys/ioctl.h>
#include <sys/select.h>
#include <stdlib.h>
#include <stdio.h>

ImaginaryBIT

# fraud
housing
bill
jobs
study
transaction
travel
car
insurance
contract

ImaginaryBIT

# Intrusion Investigation - Is this computer compromised?
Divide and  Conquer Process - Breaking big questions into smaller
Artifacts Categories:
  1. User
    - Accounts
    - Logins
    - User Acitivities
      a. Launching programs
      b. Accessing data
      c. Searching for data

ImaginaryBIT

Enable advanced features to view all attributes and tabs

OU
-add child OU
-add individual user, computer, printer...

Users
-add user group
-set member of another group
-add member

ImaginaryBIT

# Significant Files
//Windows
\inetpub\wwwroot\web.config
\inetpub\logs\LogFiles\*

\xampp\apache\conf\httpd.conf
\xampp\apache\conf\extra\httpd-xampp.conf
\xampp\security\webdav.htpasswd
\xampp\apache\logs\access.log
\xampp\php\php.ini