Garrett Gee http://garrettgee.com Confessions of an Information Addict Fri, 18 Nov 2011 22:18:27 +0000 en-US hourly 1 http://wordpress.org/?v=3.5.1 Amazing Two Months http://garrettgee.com/2011/11/18/amazing-two-months/ http://garrettgee.com/2011/11/18/amazing-two-months/#comments Fri, 18 Nov 2011 22:18:27 +0000 ggee http://garrettgee.com/2011/11/18/amazing-two-months/ The last two months for me has been crazy and amazing at the same time. I launched another company named “Godai Group” and released a whitepaper that myself and Peter Kim did research on for the last year on “Doppelganger Domains”.

Wired.com was the first major news group to write a story on and it blew up from there. On that single day it spread to numerous sites in the United States such as CNN, Slashdot, MSNBC, and GCN. I expected the story to go big because of the wide implication and impact of the issue of Doppelganger Domains, but what happened next was a pleasant surprise. The story went international and spread to the United Kingdom, Australia, Japan, India, Russia, China, Canada, and many other areas! And from there radio and print wanted to run a story as well which was quite a fun experience to interview with them and get the research out to another set of audience. This whole experience was great, and I’m thankful to all the various media outlets that carried the story. I hope that businesses take it seriously and take action.

For now, I want to get back to producing and hold off on putting on the PR hat again for a little bit.

]]>
http://garrettgee.com/2011/11/18/amazing-two-months/feed/ 0
China Trip Reflection – Part 1 – Gear http://garrettgee.com/2010/10/22/china-trip-reflection-part-1-gear/ http://garrettgee.com/2010/10/22/china-trip-reflection-part-1-gear/#comments Fri, 22 Oct 2010 15:04:32 +0000 ggee http://garrettgee.com/2010/10/22/china-trip-reflection-part-1-gear/ I just came back from a two week trip to China, and I wanted to share with you my thoughts on what worked and what didn’t work in terms of gear that I brought.

What worked

  • Duffle bag used for short overnight trips. The majority of the trip was in Shanghai, but I took two, two-day side trips to Hangzhou and Nanjing. If I were to bring my big suitcase with me, it would have been somewhat of a hassle on the train as the overhead area isn’t that deep.
  • 26” suitcase. I knew I was going to buy things while out there, but I didn’t know how much extra space I needed. The 26” suitcase felt really empty on my way out there, but on the way back it was the perfect size for everything I brought back home. I didn’t extend the suitcase either, so there was still room to spare.
  • Lowepro Versapack 200 AW – I took this bag everywhere with me. The top compartment was large enough to store all the non-camera stuff I needed for that day. It also was able to hold all the various items I bought while on the trip. The bottom section took care of my DSLR and other camera related items. Backpack straps and design made it comfortable to use throughout the trip.
  • R-strap for my DSLR camera. This strap is much more comfortable and easier to use than my op/tech strap.
  • Vitamin C. I took 500mg pills and lots of cough drops with me. Thankfully, I never caught a cold out there.

What didn’t work

  • Bringing smaller US currency. You will ultimately exchange it all, so why bring smaller bills? Maybe a few dollar bills is fine, but no need for $10 or $20s.
  • Original Sonicare toothbrush /w power converter. I love my Sonicare toothbrush, and I brought it with me. The one downside to the original model is that its only rated for 120 watts so I needed a power converter to recharge the device while in China. For whatever reason, it never fully charged which resulted in one session per a several hour charge. This wasn’t a huge failure, but I did have to bring the charging station with me on the side trips. If the device was able to hold a full charge, I would have been one item lighter while on the side trip. I think the only solution here would be to buy the newer model.
  • Wallet designed for US currency. The RMB is a bigger than the USD so my wallet never closed properly.

What I should do or buy for next time

  • Electronic translator. Either a dedicated one, or an ipod touch /w an app. Not being able to speak Chinese in certain areas where nobody speaks English makes things difficult.
  • Emergency items in case I miss a flight. Because of weather issues in Shanghai, I missed my original flight home and ended up staying an additional 10 hours in Hong Kong. Since I already checked my suitcase, I didn’t have much with me so perhaps bring a change of clothes and some various toiletries with me in the case I’m stuck somewhere.
  • Bug spray? I probably got bit over ten times on my body, and I think on my last trip out there, I got bit several times as well.

Overall, I think I did fairly well in terms of gear that I bought on this trip. Next post will have a bunch of pictures from the trip. I just need to process them first.

]]>
http://garrettgee.com/2010/10/22/china-trip-reflection-part-1-gear/feed/ 1
Nessus Tools: HTML reports revisited http://garrettgee.com/2009/11/22/nessus-tools-html-reports-revisited/ http://garrettgee.com/2009/11/22/nessus-tools-html-reports-revisited/#comments Sun, 22 Nov 2009 23:19:00 +0000 ggee http://garrettgee.com/2009/11/22/nessus-tools-html-reports-revisited/ On a recent engagement, I noticed that people were wasting time scrolling through nessus reports to find vulnerabilities in which they either need to confirm, or dig into deeper. There were many findings that would automatically be written up because there is nothing to further exploit, and the supporting information in the output was good enough. And of course there is informational things in the report like traceroute output, ping times, mac address, operating system, etc. Good information to have, but not really needed while in vulnerability assessment / penetration testing mode.

I really needed something to just show me the interesting things to focus on. Since I had all the nessus data in a database already via nbe2sql, I quickly wrote some sql statements and parsers to solve my problem and make a pretty report.

The latest release of the nessus tools has two more html reports.

  • One script is called report_auto which generates html that contain findings to simply write up. For each vulnerability type there is a table with IP and supporting information columns. 
  • The other script is called report_manual which generates html that contain findings or information to pursue.

Do note that only a handful of nessus pluginid’s are supported in the script. If you want other checks included please provide me with some sample data and I will get it included.

Code:

I do hope that others find these additions useful. I really hate it when testers have to spend time on low level findings. Yes they still need to be looked at and written up, but testers should be focusing on the interesting stuff.

]]>
http://garrettgee.com/2009/11/22/nessus-tools-html-reports-revisited/feed/ 0
End of Year Report Card: A- http://garrettgee.com/2008/12/30/end-of-year-report-card-a/ http://garrettgee.com/2008/12/30/end-of-year-report-card-a/#comments Wed, 31 Dec 2008 05:15:25 +0000 ggee http://garrettgee.com/2008/12/30/end-of-year-report-card-a/ Like every year, I like to reflect on the various accomplishments from this year. 2008 was quite a good year, but I was also very busy as well. Here are some interesting metrics  from this year:

  • Attended 26 events – a combination of conferences, workshops, and training classes.
  • Launched another startup.
  • Built several applications that are in use by many today.
  • Last year’s startup is gaining more traction.
  • Traveled 12 times, being on the road for 46 days.

Hopefully next year will be just as productive, with less time on the road. Thanks to all that helped and supported me through all my various projects.

]]>
http://garrettgee.com/2008/12/30/end-of-year-report-card-a/feed/ 0
Busy Traveling: 8 Cities in 5 Months http://garrettgee.com/2008/10/26/busy-traveling-8-cities-in-5-months/ http://garrettgee.com/2008/10/26/busy-traveling-8-cities-in-5-months/#comments Sun, 26 Oct 2008 21:03:08 +0000 ggee http://garrettgee.com/2008/10/26/busy-traveling-8-cities-in-5-months/ I just got back from another business trip, and this time I was in New York. That makes it the tenth week out of the last twenty where I have been away on travel! So where else have I been to during all that time? I’ve been to Myrtle Beach, Kansas City, Washington DC, Las Vegas, Dallas, New York, and San Diego.

The rest of the year doesn’t seem that bad. I have one or two more business trips, and then some well needed vacation time. The hard question is if I want to do more traveling during my vacation time. I enjoy traveling and love to explore, but my body might be exhausted by then.

]]>
http://garrettgee.com/2008/10/26/busy-traveling-8-cities-in-5-months/feed/ 1
Las Vegas http://garrettgee.com/2008/08/01/las-vegas/ http://garrettgee.com/2008/08/01/las-vegas/#comments Sat, 02 Aug 2008 01:33:51 +0000 ggee http://garrettgee.com/2008/08/01/las-vegas/ I just got into Las Vegas for a 10 day business trip. I did a similar trip last year, and at day 8 I was ready to be home. Anyone want to take bets on when I will break this time?

I finally got a room with a decent view this time. Is this Encore hotel an extension to Wynn, or a separate thing? I’m starting to get confused on all these brand expansions. Venetian has the Palazo, and Mandalay Bay has THEhotel. 

]]>
http://garrettgee.com/2008/08/01/las-vegas/feed/ 1
Back From Washington DC http://garrettgee.com/2008/07/20/back-from-washington-dc/ http://garrettgee.com/2008/07/20/back-from-washington-dc/#comments Mon, 21 Jul 2008 12:21:23 +0000 ggee http://garrettgee.com/2008/07/20/back-from-washington-dc/ I’m back home from my Washington DC business trip. Overall it was a decent trip, but the weather out there is not fun. I don’t know how people can stand hot and humid weather. This trip I flew out a day early, so I had a free day for once to explore the city. My original plan was to hit up one of the Smithsonian Museums, but I found a pickup kickball game in the park, and I had to join in. I’ve heard that kickball is gaining popularity with adults, and that there are even leagues. The last time I played kickball was in grade school, but because of all my years of kung fu, I could still kick the ball pretty well :) I wonder if there is a league back home.

Speaking of back home, my sister and her family visited me yesterday. I haven’t seen my nieces in a while and they are growing quickly. Here is a cute picture of Ashley.

]]>
http://garrettgee.com/2008/07/20/back-from-washington-dc/feed/ 0
105 Degrees! http://garrettgee.com/2008/07/08/105-degrees/ http://garrettgee.com/2008/07/08/105-degrees/#comments Wed, 09 Jul 2008 01:28:45 +0000 ggee http://garrettgee.com/2008/07/08/105-degrees/

And tomorrow is supposed to be even hotter! Remember to drink lots of water and try to stay cool out there.

]]>
http://garrettgee.com/2008/07/08/105-degrees/feed/ 0
Kansas City http://garrettgee.com/2008/06/16/kansas-city/ http://garrettgee.com/2008/06/16/kansas-city/#comments Tue, 17 Jun 2008 02:48:45 +0000 ggee http://garrettgee.com/2008/06/16/kansas-city/

I’m on a two week assignment in Kansas City right now. It’s been a while since I’ve been here, and I’m glad it not super hot / humid. I’ll also be working nights, so lets hope that my sleep schedule doesn’t get too mixed up.

The Sprint Center is now open, and there has been a lot of development in that area, now called the Power and Light District. The area brings a much needed life back to downtown Kansas City. One restaurant that I am looking forward to is Jack Stack. I hear their ribs and burnt ends are amazing. Anyone else have recommendations on what to do in Kansas City?

]]>
http://garrettgee.com/2008/06/16/kansas-city/feed/ 0
Hello from Myrtle Beach http://garrettgee.com/2008/06/01/hello-from-myrtle-beach/ http://garrettgee.com/2008/06/01/hello-from-myrtle-beach/#comments Mon, 02 Jun 2008 10:42:52 +0000 ggee http://garrettgee.com/2008/06/01/hello-from-myrtle-beach/

This week I am at the Marriott Hotel at Grande Dunes in Myrtle Beach, South Carolina for the Hacker Halted conference. The hotel is right on the beach, and the weather is quite nice (not too hot, not too humid).

The conference will take up most of my time here, but I hope to visit the new Hard Rock Park, and Broadway at the Beach at night. One thing I didn’t see were volleyball courts on the beach :( Maybe I will just go for a nice run along the shore.

]]>
http://garrettgee.com/2008/06/01/hello-from-myrtle-beach/feed/ 0