Author Archive for: Phillip Aaron

When people hear the term “Open API” they tend to have different thoughts on what that means. Techopedia defines an open API as one that is publicly available for use and while the technical idea of an open API is this, the reality can be quite different. A lot of professionals in IT tend to swa...

Testing automation came into existence as we all need to do more testing in the fastest manner, but to derive the best ROI for testing automation, it becomes quite blurry. You may have to be just if able while implementing testing automation all over your organization. Moreover, in the era of Agil...

Over the next few weeks, I plan to post about the RMF process.  This will piggy back on and expand upon the article: My Experience with the DoD Version of the RMF. A little background on how the DoD got to the RMF.  For those that have been around a while, it started with the Rainbow series of pub...

Anyone out there dealing with the DoD implementation of the NIST 800-37 RMF? Just in case, it’s the “Guide for Applying the Risk Management Framework to Federal Information Systems” developed by the Joint Task Force Transformation Initiative Working Group. I have been knee deep in ...

So, you’ve popped a user shell on a windows box and now you’re looking to escalate those privileges. Great! In this article we’ll look at one method of elevating your privileges by exploiting unquoted system services. A Windows service is a program that runs in the background simil...