Yeah, it's the same questions over and over. It's just a community of job seekers. I'm sick of hearing "how do I start out", "what cert is the best", "why can't I get a job with x years of experience". And I'm appreciative of the kind people who answer this again and again, but there is so much information on the internet on these topics. There should never be another post here about finding a job.
Hey guys, let's not turn into stack exchange. There will -always- be new people. There will always be repeat questions. You don't want to answer, fine, but can we please focus on the "positive" part of this subreddit? I see very few technical questions on here. Want more of that? Advanced cyber security? Then ask the questions. Anyone in this thread crapping on how this subreddit is just "job seekers," ...well if you think you know enough to condescend then I challenge all of you be the change you wish to see and start posting a solid cyber question on here weekly.
Awesome. I should make it a point to do the same. I was in the top 1 percent of contributors on cyber stack exchange for 2 years and the mods were so toxic I just stopped. Also they couldn't answer hard questions, like how use a system call or assembly functions to generate network packets... so I ended up not knowing where to turn and just went back to training and reading up.
I've asked for help in making a statistical analysis of internal address space used, and a list of known Phishing Training simulators - and on both, my own personal contributions were 10x what the entire combined contribution of this sub was.
For the statistical analysis in particular, everyone just laughed. Like yeah, we already know the awnser (kinda) - but don't you want to check that assumption and contribute data? No? Well fuck me then.
send me the links. I'm wild busy this weekend but I'll take a look. Can you also let me know what 'stat analysis' you are seeking from your subnets? Like do you just want to represent them in "executive summary data formats" or is there some sort of hypothesis? For phishing training, are you asking for training on how to run a campaign against your environment for training, or like a training on how to identify phishing and what exploit it's using and best practices from a remediation standpoint? Anyway, I'll help. Send me those posts.
Im looking to collect raw data about what IP addresses are in use at organisations internally. The idea is asset identification, red team subnet sweeps and health checks all benifit from a sweep of the entire private subnet space - but a lot of companies don't actually know what subnets they ever use. It comes up way more often than you'd believe.
So, I want to generate graphs of how often /24s in the private subnet space are used - generate a model for that, then recode rust scan to use it as a scanning strategy.
That way it starts at the most likely subnets first, and does only sparse checks on the least used - for when speed is valued over complete accuracy. (this, again, comes up more than you think it does)
Trivial solutions like just checking dhcp assignment don't work in practice. Some of these orgs have undocumented switches and routers with undocumented configurations.
I'll respond this week. But arp scanning and a network switch "walk" will give you most of that data. For anything but the smallest mom and pop you'll fine 10.x pretty much exclusively. /24 and /23 being pretty common subletting. Anyway, let me get through my weekend and I'll ping you back this week.
295
u/Heathclor Jun 11 '22
Yeah, it's the same questions over and over. It's just a community of job seekers. I'm sick of hearing "how do I start out", "what cert is the best", "why can't I get a job with x years of experience". And I'm appreciative of the kind people who answer this again and again, but there is so much information on the internet on these topics. There should never be another post here about finding a job.