Happy Holidays,
from Rapid7

NOW That's What I Call HaXmas, Volume 2!

SHARE

Track Listings


1. Carol of the Shells

Oh the alerts
They're critical
No need to fear
Haxmas is here

Brute force attacks
From everywhere
Filling the LAN
Breach is declared

Unleash the beast
While people feast Shells of great fear
Haxmas is here

Merry, Merry, Merry, Merry HaXmas,
Merry, Merry, Merry, Merry HaXmas.

2. Hackin' Around the CTF

Hackin' around the CTF
Got the tools on my laptop
Packets and shells, where you can't see
Popped one, now I can't stop

3. Auditors Are Coming to Town

You better control
You better comply
You better safeguard
We're telling you why
Auditors are coming to town
Auditors are coming to town

4. Check the Firewalls

Check the firewalls and proxies
Wall-alalala la la la la
'Tis a common appsec policy
Wall-alalala la la la la

Must restrict untrusted traffic
Wall-alalalalal la la la

5. O' RDP

O RDP, o RDP
How many are your breaches
O' RDP, o' RDP
How many are your breaches

You're brute forced in record time
BlueKeep exploits are ready primed
O' RDP, o' RDP
How many are your breaches

O' RDP, o' RDP
So many exploits you give me
O' RDP, o' RDP
So many exploits you give me

6. Do You See What I See

Said the admin to the analyst
Do you see what I see?
Way down they saw an incident
Do you see what I see?
A log, a log
Hidden in plain sight
With a trail straight to the exploit
With a trail straight to the exploit

7. Do You Want to Build a Plugin

Do you want to build a plugin?
C'mon, let's code away
Old apps won't cut it anymore
They're such a bore
Let's automate today

I need more orchestration
To save some time
Oh, how the day could fly

Do you wanna build a plugin?
It kinda has to be a plugin
API

8. Merry HaXmas (Happy Patch Tuesday)

Merry HaXmas
Merry HaXmas
Merry HaXmas
Happy Patch Tuesday
Ooh yeah!

On the first day of HaXmas, Rapid7 gave to me, the HaXmas blog series