Oscp Mugs

A funny reference to a well known film but with CISSP and OSCP certifications.

A funny design of a samoyed working in cybersecurity and is committed to fight against the bad guys!

A funny design for someone who can't use a tool other than kali linux for security assessments or penetration testings. It is the most used and well-known Linux distribution for hunting vulnerabilities.

Red team are like ninjas, they attack with their stealthy techniques to avoid being detected and prove there is a vulnerability before an actual attacker discovers it. Perfect design for CTF game.

If you passed the OSCP exam and finally got the certification, then this design is absolutely for you! You've tried hard so you deserve this badge!

El equipo de IT debe de tener cuidado cuando trata con la cuenta de administrador de dominio y no crear mas de lo debido este tipo de cuentas, ni tampoco usarlas en ámbitos que no se requieran, para no dejar rastros del ticket de kerberos ni sus credenciales.

El Kali Linux es el sistema operativo mas usado para las pruebas de penetración. Con lo cual, sin Kali, no hay diversión.

Es preciso recordar a los empleados de la organización que la ciberseguridad es su deber también, y que eviten usar USB ajenos a la organización para evitar que la red sea comprometida por algún agente malicioso.

Funny design of hashcat tool in a pun form. Hashcat the hash!

A motivational quote for cybersecurity professionals to defend harder their organisation network because the adversary will try hard. Never underestimate the attacker.

A reminder for developers to review commented code and take care of it to avoid disclosing secrets or giving hints to a malicious actor. After all secure coding.

The shield is defensive but the sword is offensive, and that's what the cybersecurity red team does in the CTF game.

A sword is an offensive weapon which is normally used for attacking your opponent. That's why the Red Team may be represented with a sword in the CTF game.

Esto es un diseño divertido sobre el fundamento del Zero Trust que se basa en no confiar en el acceso sin importar de donde provenga y autenticarlo siempre.

The nmap tool normally is one of the first tools you use to assess the security of your network. So no nmap means no fun. This is a black background with white letters design.

Besides input validation which avoids processing any untrusted data by the application, it is important to perform output validation when writing logs, not only to avoid disclosing any sensitive information but also to prevent local file inclusion attacks.

The nmap tool normally is one of the first tools you use to assess the security of your network. So no nmap means no fun.

An awareness design to tell your peer developers to implement input validation to prevent injection, buffer overflows, denial of service or even log sanitisation.

An arcade look and feel of the blue team design. Great for wearing it in the capture the flag game.

The red team design in an arcade look and feel, great for the capture the flag game.

One of the ways to reduce the risk is to limit the impact in case of compromise so practicing least privilege is the way.

An awareness design to remind coworkers to don't leave unlocked their computers even for going to the toilet.

This is the message that all pentesters don't want to receive when doing such activities.

Bug bounty programs are one of the ways to combat zero day vulnerabilities by finding any flaws on the application or system before the bad guys.

One of the things that a Cybersecurity professional have to understand is that users might don't tell the truth or they don't know what harm caused due to their actions. So logs and SIEM could clarify what happen really because they tell don't lie.

This is a typical attack that takes advantage from a web server misconfiguration. The result is that the malicious actor can browse the server file system.

Dark background version of a minimalistic design for threat hunters, a specialized cybersecurity profiles which analyzes and deploys new ways of detecting threats in the organization network.

Design about one of the ways that bad guys may use to compromise a target organisation network. If macros or scripts are allowed generally in office documents, then they could potentially use them to execute malware if one of the employees clicks or opens anything evil in a phishing email. A complete headache for cybersecurity team.

It is important to share urls or domains with one of the dots surrounded by brackets when it comes to threat intelligence, since they can be clicked accidentally and could end up in disastrous results. This is a black background with white letters design version.

Threat hunting is one of the most interesting activities that the soc team does, in order to detect any potential threat or to create new detection use cases for future attacks.

Before Kali Linux became that popular, it was known as Backtrack Linux and this distribution was renamed to kali from 2013.

I know there are other pentesting OS but honestly, Kali still the most used so, no Kali no fun.

Yet another security awareness design, this time related to one of the weakness to address in terms of Linux configuration or hardening. If you stop writing the previous commands in the history, you can avoid the passwords being wrote on it when admins use them in commands as parameters.

Layered defense or defense in depth, both are terms to refer to the same strategy to protect the assets from your organization. To put multiple and different security controls from the technical ones to administrative ones.

No importa de donde provenga el acceso a los datos, tanto si vienen desde internet como si provienen de la red interna. Autentica siempre dicho acceso.

Una de las verdades universales es que la gente miente, sin embargo, las pruebas son irrefutables y el SIEM es una fuente de este tipo de trazas o pruebas.