st justin :debian:

Always curious. Solver of problems. Keeper of engineer notebooks. Interested in networks, security, GNU/Linux, BSD, and the intersection of humans, technology, and the world. CISSP. 13 year CCIE. MS in Information Technology Management, specializing in Cybersecurity. Some other letters. Eagle Scout. Leader and mentor.

love is the radical choice

#HireMe #FediHire

personal: https://jgmitchell.com/
business: https://arcus-it-solutions.com/
github: https://github.com/jgmitchell257
header source: https://www.artofgregmartin.com/imagine/imagine-collections/mushrooms-ii

Public Key

npub1snjlr75qstkns5vgaysvfnftdtmq3sjxd7wurg0a6gac0yrph98qg2sypa

NIP-05 Address

jgmitchell303_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqsgfe03l2qg9mfc2xywjgxye54k4asgcfrxl8wp587aywu8jpsmjnsrtxtyn

Author Public Key

npub1snjlr75qstkns5vgaysvfnftdtmq3sjxd7wurg0a6gac0yrph98qg2sypa

Show more details

Last Notes

2024-05-14 18:36:20

Greetings beautiful people! I could really use some #work, so it is probably time for a (re)introduction...
I am a systems thinker. I love to think deeply and examine complex technical problems to create solutions that not only meet the needs of today, but the needs of the future as well. I use a holistic lens and approach my work with the idea that everything is connected.
I am always curious, exploring and learning new things to connect the dots between ideas, concepts, and reality.
I am a solutions architect working in the enterprise infrastructure space focused on networking and security. I help organizations develop and maintain secure and reliable network connectivity, policies that protect their assets, and discover areas and processes for improvement. I can be a very technical person, but I also possess a strong understanding of business and organizational needs/drivers.
I would love to find a position as a solution architect, project manager, or technical team leader/manager in network security or general cybersecurity. I come with a #CCIE, #CISSP, and an MS in IT Management among other achievements.
If you can find it in your heart to boost this, I will be grateful for a very long time. Any leads or connections I can get are greatly appreciated!
#introduction #fedihire #infosec #networking #security

2024-05-08 19:52:50

I finally spent a gift card I got for Christmas

2024-05-08 17:06:41

- reply

Permanently delete? Yes

2024-05-08 16:37:50

- reply

I only have Spotify because it makes my life easier with the wife and kids. My digital music collection has continued growing since Napster.

2024-05-08 16:29:08

- reply

I'm sure it will :D
I've been listening to this a lot lately https://open.spotify.com/playlist/5TI5njbyM72BvXY0vpJbKb?si=7928e282f03d47f6

2024-05-08 16:24:07

- reply

wonderful

2024-05-08 16:21:51

- reply

sorry to hear that. I've been looking since September :(

2024-05-08 16:20:47

- reply

all good. I feel the same way about it.
Anyway, give me your favorite playlist for a "therapeutic" journey...

2024-05-08 14:25:06

- reply

won't disagree and not trying to start an argument. I think the problem is "ethical" hackers are trying to take back the term from malicious actors, when the media and others stole it gave it to the "bad" guys.

2024-05-08 14:22:01

- reply

marketer vs spammer

2024-05-08 14:20:12

- reply

I'm "ethical" but my ethics are way different :P

2024-05-08 13:53:14

- reply

maybe our jobs really are pointless

2024-05-08 13:46:14

- reply

😂

2024-05-08 13:45:20

This is my favorite coffee cup. My mom and brother made it for me 20+ years ago when I moved from Casper, WY with my (now) wife.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/405/760/305/103/884/original/ce7216bea8ee159c.jpeg

2024-05-07 21:17:05

- reply

sigh, everything is lie... but why should I be surprised? 😭

2024-05-07 19:18:34

Yesterday I had a visit with my replacement psychiatrist for my psychiatrist who was a replacement for my original psychiatrist. As someone who has struggled for as long as they can remember we do a terrible job of helping people. While I appreciate their efforts to help me find something that works, I'm tired of the basic replies which are essentially:
"Well, have just tried not being you?"
"Best I can do is other drugs which will mess with everything in a different way than your current drugs"
"What about reframing what is going on?"
And my favorite, "I'm not saying there's meaning to life, but have you tried to find some meaning or purpose in yours?"
Gee, thanks. I've tried all of that stuff and I still hate it here. I'm the first to admit the only reason I keep hanging out is the three people I love and who live with me.
I'm not really attached to stuff. I don't want things. I know when I die, I can't take it with. I prefer for people to spend time with me than to give my things, but I do treasure a handful of things my loved ones have given me and they sit on the shelves next to my desk to remind me that I am loved. Even when I can't see through the veil or feel it.
I do my best to be honest with everyone about what goes on in my head, but something gets lost in translation. My brain doesn't turn off but I also can't stay drunk or high to stop it from doing it's thing.
Maybe one day we'll figure it out.

2024-05-07 18:32:57

#OpenToWork

2024-05-06 20:15:12

ICYMI, I'm still available to hire

2024-05-06 12:46:31

I bought a new coffee maker on Saturday night. I really feel like today is the day I'll make some real progress on my CPTS exam

2024-04-30 18:22:48

- reply

I approve of this, but they just keep talking about it instead of actually doing it.

2024-04-30 17:17:35

https://www.youtube.com/watch?v=ebPoSMULI5U

2024-04-29 19:59:27

- reply

I hope that is my situation :D
The visual (smiles, head nods, approving looks) and verbal ("you're hitting all the right notes and ideas") feedback the entire time was quite positive.

2024-04-29 19:43:37

Is it better to interview early in the line of candidates or later? I think I'm early, but I really have no idea.

2024-04-29 13:34:31

"The internet is becoming a sea of sameness. But what we crave most is something genuine-something real-not a hollow imitation, but an artist who has the courage to be fully themselves."
- [@Daojoan](https://mastodon.social/@Daojoan)

2024-04-29 13:18:36

- reply

if it works on yours, I will gladly get some for mine as well!

2024-04-29 13:16:54

- reply

$teen is now infected with mind controlling nanobots

2024-04-27 19:43:20

I should print out a new employee of the month award for myself... maybe even, employee of the year.

2024-04-27 15:07:01

Watched the 4chan documentary on Netflix this morning, "The Antisocial Network." I wish they had covered a few more of the OPs that brought a lot of kids into the anonymous fold and gave it even more power/attention/resources.

2024-04-25 20:46:02

I don't know what changed, but I can leave my Yubikey in now and Firefox doesn't whine about it

2024-04-25 20:24:23

And I'm back up and running on a fresh install. It's a good thing I don't rely on a ton of customization, just a few theme and dot file tweaks.

2024-04-25 19:40:11

- reply

I did not know that about mastodon URLs

2024-04-25 19:22:12

- reply

Old RedHat (before enterprise), Slackware, Fedora Core, OpenSuse, Fedora, CentOS, Scientific Linux, FeedBSD, OpenBSD, Mac, ChromeOS, Debian, Parrot OS, qubes OS, WSL... decided I'd just stick with Debian.
It's reliable and doesn't give me problems most of the time. Plus it's what I've been using daily for the past couple of years. I looked at the features of other distros and just couldn't come up with a compelling reason to switch.

2024-04-25 17:28:10

- reply

r/GoneLame

2024-04-25 17:23:26

Woohoo! Finished!
```
sent 140,589,898,212 bytes received 6,217,381 bytes 21,178,898.18 bytes/sec
total size is 196,477,778,223 speedup is 1.40
```

2024-04-25 17:22:48

Should I reinstall Debian or pick a different distro?

2024-04-25 17:18:42

- reply

can we just say they turned on the AI ingestion feature and it overloaded the system? #reddit

2024-04-25 17:15:36

I'll probably never restore parrot.vdi either. It'll be quicker to build a new VM.

2024-04-25 17:14:27

going on 3+ hours for my backup `rsync -aEv /home/jgm /media/jgm/XXX/20240405-home`

2024-04-24 22:12:19

- reply

that I kind of understand, washing away food to keep critters away. He's just washing it because 🤷

2024-04-24 22:03:47

- reply

He is now power washing the street

2024-04-24 22:00:56

My neighbor is power washing their driveway. Which they park vehicles on. And is outside.
This is why the human race is going to suffer.

2024-04-18 01:23:57

- reply

thanks for sharing! Looking at the descriptions though, I'm missing some critical things. 😐

2024-04-17 22:29:02

- reply

🙋 I'm available

2024-04-17 12:43:25

- reply

agreed, everyone wants "their" definition of what a role/title/position to be the one.
I had a discussion with a hiring manager that I didn't really care about titles because they all mean different things to different. My chosen title and description of solution architect is probably very different from another's.

2024-04-17 03:09:15

- reply

probably more than me

2024-04-16 16:39:40

- reply

this was a good read. I always appreciate the perspectives The Pragmatic Engineer brings.

2024-04-15 18:49:44

Is there a way to echo a variable into a #curl url?
I want to use "curl -I http://$target_domain" so I can get the file size...

2024-04-11 20:52:41

I'm going to have to go back to the drawing board on this one. I'll do my write up and submit it, but hopefully it takes more than a few days for them to review so I have more time to study and look up potential exploits.

2024-04-11 12:32:41

I'm getting closer, I can feel it.
I just need to figure out how to take advantage of this thing I found.

2024-04-10 21:42:12

*finds something new!*
*does the biggest happy dance in the world*

2024-04-10 21:04:43

- reply

thank you 😃 , me too.

2024-04-10 21:03:26

- reply

I'm sad because it is for an exam and so I can't actually share details or discuss it with other people. I have a huge list of potentials, but I can't get any of them to work and since it's an exam I just have to beat my head against the wall and hope my brain cells connect.

2024-04-10 20:56:40

- reply

I've also thrown BurpSuite and ZAP Proxy at it.
Read tons of documentation.
Even waved my magic chicken feet over my laptop.

2024-04-10 20:43:40

What do you do when you can't find the way in during a pentest? I KNOW there is an RCE somehow, I'm just not smart enough to find it.
*cries in n00b*
I've run multiple iterations of nikto, ffuf, wfuzz, sqlmap, nmapAutomator, a variety of NMAP scans, scripted, and manual enumeration techniques. I have a list of vhosts that have been discovered, with at least one that wasn't in DNS. I reviewed source code for apps, and every single CVE and report on potential issues I could find, and still no luck.
Guess I'll take another break and go sit outside for a bit.
#pentest #pentesting #cybersecurity

2024-04-10 14:57:50

I love how much my pentest VM is crashing this past week

2024-04-09 16:40:10

- reply

the best extension for that was IRC

2024-04-09 16:39:42

When will MS understand I don't want Co-Pilot?
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/242/246/714/394/026/original/e672313f3bb733d3.png

2024-04-09 12:55:43

- reply

"I'm sorry, we had to destroy your machine. The amount of horrible things we found was just too much."

2024-04-09 12:54:31

- reply

so a single box with talk installed where we call just chat with each other?

2024-04-08 16:49:27

I really feel like I'm going to spend my entire time trying to get this RCE and have nothing to show for it in the end.

2024-04-08 02:28:43

Still no luck... Going to let the bruteforcer run over night and hope it finds something overnight. Tomorrow is a new day.

2024-04-07 22:36:12

- reply

Here you go!
https://github.com/danielmiessler/SecLists

2024-04-07 17:11:29

Using BASH to fuzz multiple subdomains.
for sub in $(cat subdomains.lst); do ffuf -w /opt/useful/SecLists/Discovery/Web-Content/directory-list-2.3-medium.txt:FUZZ -u http://x.x.x.x -H 'Host: FUZZ.'"$sub"'.example.com'; done

2024-04-06 22:15:12

ffuf -w /opt/useful/SecLists/Discovery/Web-Content/directory-list-2.3-big.txt:FUZZ -u http://x.x.x.x -H 'Host: FUZZ.example.com'
+
nmapAutomator -H example.com -t all -o scans

2024-04-06 22:11:04

Over 24 hours and still no luck 😭
I decided to archive my notes, reset the systems, start from the beginning.
I can't be this bad at it, but maybe I am.

2024-04-05 17:00:15

- reply

❤️

2024-04-05 16:57:29

When you type the base domain correctly, you actually find more stuff

2024-04-05 16:52:37

I am the dumbest person in the world... f'n typo!!!!

2024-04-05 16:44:12

- reply

Yep, going to go drink a cup of coffee while ffuf runs and looks for vhosts

2024-04-05 16:22:25

- reply

2.5 hr and still no measurable progress

2024-04-05 14:18:17

scanning and searching and reading...

2024-04-05 13:46:22

Feeling bad about my skills as I struggle to get an initial foothold on this server :(