Sparse
+Bind shell and C2 beacon/server implementations using direct network access to evade firewalls and auditing
+ + +diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml index bfbe129..ed238e4 100644 --- a/.gitea/workflows/deploy.yaml +++ b/.gitea/workflows/deploy.yaml @@ -21,7 +21,9 @@ jobs: chmod 400 ssh-key export NIX_PATH=nixpkgs=flake:nixpkgs:/nix/var/nix/profiles/per-user/root/channels/nixos /run/current-system/sw/bin/nix-shell -p rsync openssh --run \ - 'rsync -avz -e "ssh -oStrictHostKeyChecking=accept-new -i ssh-key" result/* deploy@andrew.riouxs.co:/srv/site' + 'rsync -avz -e "ssh -oStrictHostKeyChecking=accept-new -i ssh-key" result/{build,index.html,resources} deploy@andrew.riouxs.co:/srv/site' + /run/current-system/sw/bin/nix-shell -p rsync openssh --run \ + 'rsync -avz -e "ssh -oStrictHostKeyChecking=accept-new -i ssh-key" --ignore-existing result/articles/* deploy@andrew.riouxs.co:/srv/site/articles' - name: Remove SSH key if: always() diff --git a/build/build-index.sh b/build/build-index.sh new file mode 100755 index 0000000..fa9abbc --- /dev/null +++ b/build/build-index.sh @@ -0,0 +1,22 @@ +#!/usr/bin/env bash + +LINKS="$(ls articles/*.org | tac | head -n 10 | while read -r article; do + TITLE="$(grep -E '^#\+TITLE:' "$article" | sed -e 's/^#+TITLE:\s*//')" + DATE="$(git show --no-patch --no-notes --pretty='%as' `git rev-list -1 HEAD -- $article`)" + echo '
' + awk '/^\*\*+/ { found_header = 0; found_first_header = 1 } /.+/ { if (found_header) { print } } /^\* / { if (!found_first_header) { found_header = 1 } }' < "$article" + echo '
' + echo '+ Software Engineer & Security Researcher +
+ +Bind shell and C2 beacon/server implementations using direct network access to evade firewalls and auditing
+ + +System security and enumeration tool designed to run on systems plagued with adversaries
+ +Event management and reporting system for Civil Air Patrol units
+ ++ Software Engineer & Security Researcher +
+ +Bind shell and C2 beacon/server implementations using direct network access
+ + +System security and enumeration tool designed to run on systems plagued with adversaries
+ +Event management and reporting system for Civil Air Patrol units
+ ++Direct network access is a technique that can be used to decrease the likelihood of detecting malicious network traffic on an endpoint. It can be seen as an extension of the MITRE ATT&CK technique T1205 Traffic Signaling, as it allows a threat actor to either respond to signaled traffic or to initiate traffic. +
+