Tagged networking

Verify and exploit MS17-010 EternalBlue on SMBv1 hosts with Nmap and Metasploit

Hunt data theft in Zeek and Suricata traffic for DNS tunneling and cloud uploads

Hunt DNS hijacks, dangling CNAMEs and rogue zone changes in passive DNS and cloud logs

Flag DNS tunneling in Zeek dns.log by entropy, query volume and unusual record types

Build BeyondCorp zero trust access with IAP, device checks and VPN-less app access

Set up RPKI route origin validation with ROAs, validators and router ROV policies

Plant DNS, HTTP and AWS key canary tokens that alert on network intrusion

Write Calico global policies, host endpoints and DNS-based egress rules

Audit and tighten GCP VPC firewall rules and hierarchical policies with flow logs

Plant fake AWS keys, DNS canaries and document beacons to flag attacker access

Deploy Tofino industrial firewalls to filter Modbus, EtherNet/IP and S7 traffic to PLCs

Deploy Cisco ISE for 802.1X, MAC bypass, posture checks and dynamic VLANs

Design firewall security zones and inter-zone ACLs to limit east-west lateral movement

Search Arkime full packet captures for C2 beacons, DNS tunnels and bad TLS certificates

Configure Palo Alto firewalls with App-ID, User-ID, SSL decryption and threat profiles

Set up NextDNS over DoH or DoT to block malicious, phishing and cryptojacking domains

Replace VPN access with identity-aware proxies and micro-segmentation in the cloud

Baseline Modbus TCP traffic and flag odd function codes and unauthorized register writes

Inventory documented, shadow and zombie APIs from traffic, DNS and cloud resources

Enumerate DNS records, try zone transfers and brute-force subdomains during recon

Flag DNS tunnels using query entropy, length distributions and TXT payload checks

Hunt implants and bootkits in router, IoT and UEFI firmware images

Audit GCP IAM, firewall and storage against CIS benchmarks with Forseti and SCC

Onboard log sources into SIEM by value tier, parser build and CIM field normalization

Rebuild sessions and extract files from PCAPs with Wireshark and tshark

Analyze PCAP files with Wireshark, tshark and tcpdump to find exfiltration and C2

Script tshark and pyshark to flag scans, beacons and DNS tunnels in PCAP files

Assess OT and SCADA networks for Purdue layer gaps, IT/OT links and firewall rules

Craft and inject custom packets with Scapy and hping3 to test firewall and IDS rules

Set up TLS break-and-inspect on firewalls and proxies with certificate exemptions

Get confirmed payloads past WAF rules with encoding, method and parameter tricks

Run advanced Nmap scans with NSE scripts, timing and evasion options

Map adversary C2 servers and phishing domains by pivoting through DNS and cert logs

Route any small business request to the right skill for the moment

Structure Next.js 14+ App Router apps with server components and routing patterns

Apply Next.js App Router patterns for server components, data fetching and routing

Capture and filter packets with Wireshark to troubleshoot traffic and spot anomalies

Investigate dropped packets, VPC Flow Logs and firewall issues on GCP

Configure Linux firewalls, routing and DNS, and troubleshoot network issues

Build Next.js apps with App Router, SSR, middleware and deployment

Protect TanStack Router routes with beforeLoad redirects, roles and auth providers

Split TanStack Router routes into lazy bundles with autoCodeSplitting and lazy files

Migrate a Next.js App Router project to TanStack Start step by step

Migrate a React Router v7 app to TanStack Router route by route

Handle TanStack Router links, navigation, preloading and navigation blocking

Handle TanStack Router not-found pages, error components and route masking

Define dynamic, splat and optional path params in TanStack Router routes

Build React routes with TanStack Router hooks, Link, Outlet and error boundaries

Learn TanStack Router core concepts like route trees, createRouter and matching