Marching Towards Inevitability

A big part of depression is feeling really lonely, even if you’re in a room full of a million people.

Lilly Singh

It may come as a surprise, or maybe it won’t, that I suffer from multiple ailments that effect my mental health. Honestly some days, weeks, months… Are more difficult than others. This week has been one of those times.

I write this in hopes that you won’t give me your sympathy. I don’t need it. Instead I want you, dear readers, to simply read and let things soak in. Think about your life and know that even if your friends, loved ones, co-workers, and others around you whom you care for probably experience these same feelings. Because when you suffer from these mental illnesses… It is easy to tell yourself that you are the only one who feels that way. You may think that there is something wrong with how you feel and be ashamed to share with those who care. I often feel that way.

So today, let me tell you how I feel. I feel like I am drowning, slowly in an ocean plagued with storms and tidal waves. I feel like my brain is submerged in a thick fog and that there is no waking from the stupor. My bones and muscles ache deep to the core where it feels as if I am being crushed by an invisible force. I dread having to interact with people because what if they notice that I am fucked up?

The reprieve comes in small acts from those whom I interact with. Small acts make huge differences and eventually I feel as though my head is just barely above the surface of this tumultuous ocean. The trepidation of dealing with the world momentarily dissipates.

But soon, even with support, my head will sink below the surface, and the waves come crashing in on me, a roaring pressure in my head screaming that I am worthless, undeserving, unlovable. The fear of bringing others down with me keeps me wearing a mask. Pretending that I am “okay”.

I say these things because depression, anxiety, and phobias keep who you really are repressed. This shell whom you interact with, is but a husk of who I really am. You are presented with something that resembles Kat, but is not Kat. And this plague afflicts 1 in 4 adults. Chances are high that you or someone you love or cherish feels this way. Just know that they need you. If it is you who feels like this… Your friends and family no matter how they may act, need you. They are there for you, as you are for them.

If you are ever in a state where you feel like you can’t go on, there is help. Reach out. Please.

Suicide Prevention Life Line

Jerry?!

Well what to say about Jerry?

My first box, Jerry, is a fairly easy jaunt into the world of Hack The Box. (Total time including researching and learning/downtime approx. 43 hours.) At first glance we notice a lot of things that we can learn from this experience and use going forward.

Steps:
I performed initial recon into the box using Sparta.  This can be done manually also. (Resources I used: NMAP Cheat Sheet )

Seeing that there is an Open port at 8080,I went to investigate, it’s an Apache Tomcat server.

Going into Tomcat, i tried to enter into the system information, but got nowhere, so I pulled up the documentation and saw a password listed. could they have used the OOTB Password?
Yes, yes they did.  tomcat/s3cret.

using these credentials, I then logged into Jerry’s Tomcat server instance and poked around a bit. I then researched how to log into windows from Tomcat, and got a LOT of information. So knowing what to do, just not how to do it, getting in required a lot of research.

How I did it:
Using MSFVenom I was able to build a payload as a .war file and upload it to the server, but i kept getting errors. So i went back to square one.

If at first you don’t succeed, try, try again.

I used netcat to open up a reverse shell in one terminal, and a bind shell in another terminal instance. This worked!
(Hackingtutorials.org)

So then I went back to square one with MSFVenom and Metasploit.
(How to use MSFVenom)

I was able to create a proper payload using this information and connected via MSFConsole.  Viola! instant access!

Impressions:

This was a really easy box after messing around with different ways to get in.  Once you know how to do what you want, it’s easy to acquire.  I will definitely try other boxes in the future.

 

Why Did I Start a Blog?

I never ask a man what his business is, for it never interests me. What I ask him about are his thoughts and dreams.

-HP Lovecraft

So, as I delve more and more into learning about cyber security I figured that it would be beneficial to start logging my endeavors. Not saying that there will only be posts relating to cyber security, Hack the Box, CTFs and ARGs however. On the contrary, I will also be logging information on other goals and achievements.

Because I am just starting this, it will take me a while to eloquently pen what I am thinking or learning so please bare with me while I undertake this learning experience. Also there may or may not be a vast amount of quotes by HP Lovecraft, William Gibson, and other great authors whom I admire greatly popping in from time to time.

Stay on the lookout for my next post… “Jerry?!”