Monday, 30 December 2019

Year in Review - 2019

With just two days to go before the new year arrives, I figured this would be as good a time as any to review how 2019 went for me.

I've been able to accomplish a lot with https://tcpdump101.com including a full UI/UX redesign, updating and adding new Check Point modules and generally performing small bug fixes. Although lately I haven't had as much time to commit to it, I still plan on adding more features. I have started working on support for nmap and that's what I'm focusing on next. In terms of search engine results, here are my Google results for the year:

Average Position: 26.9
Average Click-Through: 5.6%
Total Impressions: 59,000
Total Clicks: 3,020

I'm happy that I'm able to reach around three thousand people and hopefully help them out. I also hope that they've bookmarked the site and continue to use it and learn from it.

I've started work on another small personal project called Gr@ve_Rose's Offensive PCap Enumerator (https://bitbucket.org/Grave_Rose/grope/src/master/) which has proved handy for both myself and a few members of our Red Team. It will process packet captures and do it's best to enumerate systems based on noisy packets such as ARP, SMB, DHCP, OSPF and others. It will work with both IPv4 and IPv6 PCaps and there are specific enumerators built in for IPv6. It's still in it's infancy so I'm looking for feedback in the hopes to make it more robust. Feel free to check it out and let me know what you think.

On a personal note, my guitarist and I have found a new bass player and are starting to work on some new music. Although it is a bit of a pain to start from scratch, we're really enjoying the process. We know we're not the next Metallica or Megadeth and we're all just doing this for fun. Seeing as we're starting anew, it's good to just take it slowly and enjoy the ride.

With the help of Champix, I've quit smoking but have packed on a few extra holiday pounds; A worthy trade in my opinion. I'm reorganizing my schedules so that I'll always have time to hit the gym at least once a day and will be planning out extra healthy meals for the week. Seeing as my wife and I were gifted an InstantPot for the holidays, I'm pretty excited for this part of my life - It's been far too long.

I've come to the realization that there are a lot of things I want to accomplish but not a lot of time to do them in. The next year will bring in a more regimented person geared toward even more good things. I hope to help people out as much as I can with the knowledge that I have to pass on and be the best me I can. I hope the same holds true for you.

Gr@ve_Rose 

Friday, 23 August 2019

tcpdump101.com - Version 1.01 Released

Just a few small updates for this version:

  • Check Point friendly 'fw monitor' (featured in R80.20 JHF73+) is now supported. When selecting 'fw monitor' you will be prompted to choose which version you want to build with.
  • Updated the "Static Routes" area for the Cisco ASA IPv6 route addition and deletion which now function properly.
Happy Packet Hunting!

Gr@ve_Rose

Wednesday, 26 June 2019

tcpdump101.com - Version 1.0.250619 Released

Wow... It's been a long time that was in development but I'm proud to announce that the newest version has been brought into production! Here are the new features in this release:

  • Splash page has been removed and replaced with a "home" page.
  • Menu bar on the left has been improved.
  • Error checking is now colour-coded (Green is good, Yellow is suspect and Red is an error).
  • All options now have inline contextual help by hovering over the question mark icon.
  • All select options and titles can be clicked on anywhere instead of just on the button or words.
  • All filter options have been ordered following the OSI model.
  • You can now add filters above and below other filters - No need to stack then at the bottom any more.
  • There is a "Back to Top" button which will show up if you scroll down far enough.
  • The command bar at the top will always be visible at the top regardless of how far you scroll.
  • The "Copy Command" button has been removed as you can now click on the top bar to copy the command.
  • A new floating right-hand menu is present for copying the commands or starting again. This is where the rubbish bin icon has moved to.
  • Using the "not" option in filters will now show an inverted icon in the filter box for ease of spotting negated filters.
  • There is a new command-line interface section which will continuously be expanded for common platform commands.
  • There is a new link to join the Discord channel.
  • There is a new RSS feed link for people who want to subscribe.
  • The download section now has a quick copy 'n paste "wget" command to download the tool for offline use.
Whether you want to drop me a line telling me you like it, if you've found a bug or if you have any suggestions to improve this, all feedback is welcomed.

Happy Packet Hunting!

Gr@ve_Rose