5 ms·
This reminds me of a throwaway monitoring project[0][1] we made for CCDC[2] (a 2-3 day IT security competition with extremely limited access to internet resourc
by cemthrowa 6y ago
This reminds me of a throwaway monitoring project[0][1] we made for CCDC[2] (a 2-3 day IT security competition with extremely limited access to internet resources), long ago. It wasn't especially structured / beautiful — just a bunch of copy paste with some HTML slapped around it. But it worked well enough. We caught an intrusion / defacement and had restored the site from backup before the red team called us to gloat, which was amusing.
(Aside: most of the teams in this competition were from IT/sysadmin programs. Our team was entirely computer science students, with no formal sysadmin training. We managed to win the national CCDC in 2011 and 2012.[3])
[0]: https://github.com/cemeyer/ghettonagios https://github.com/cemeyer/ghettonagios
[1]: https://github.com/cemeyer/ghettonagios/blob/master/SCREENSHOT.png https://github.com/cemeyer/ghettonagios/blob/master/SCREENSH...
[2]: https://www.nationalccdc.org/ https://www.nationalccdc.org/
[3]: https://www.nationalccdc.org/index.php/competition/about-ccdc/past-winners https://www.nationalccdc.org/index.php/competition/about-ccd...
- reacharavindh 6y agoNostalgia. I was part of the team that came second in 2012. Our fun trick was accidentally marking C: as read only on the active directory server. The red team thought we did something great that they could not get their payloads in ;-)
- cemthrowa 6y agoYeah, lot of nostalgia. We did a lot of random shenanigans that might be less viable in the real world. Firewalling all outbound TCP connections, moving IIS-served webpages to Apache on a Linux server, moving everything off the Solaris box and just turning it off. The fact that we even had a backup to restore after we noticed the defacement I mentioned earlier was a fluke.