Post Exploitation Archives • Page 33 of 33 • Cybersecurity News

April 24, 2017

Hot Potato – Windows 7,8,10, Server 2008, Server 2012 Privilege Escalation in Metasploit & PowerShell

How Potato works Hot Potato (aka: Potato) takes advantage of known issues in Windows to gain local privilege escalation in default configurations, namely NTLM relay (specifically HTTP->SMB relay) and NBNS...

Metasploit / Network PenTest / Post Exploitation

April 8, 2017

Upgrade shell session to meterpreter session on Metasploit

Sometimes, I can get only shell session on your target by exploting some vulerabiliy. With shell session, you can execute commands that OS system support as ipconfig, systeminfo, tasklist, taskill…...

Maintaining Access / Metasploit / Network PenTest / Post Exploitation

March 23, 2017

An Introduction to Metasploit Meterpreter Backdoor

What is Meterpreter? Meterpreter is an extension module in the Metasploit framework that is used as an attack after a successful overflow. The attack returns a control channel after the...

Exploitation / Network PenTest / Post Exploitation

March 12, 2017

Penetration Testing on Intranet Netkwork with Cobalt strike

Introduction Cobalt Strike is software for Adversary Simulations and Red Team Operations. Adversary Simulations and Red Team Operations are security assessments that replicate the tactics and techniques of an advanced adversary...

Metasploit / Network PenTest / Post Exploitation

January 2, 2017

Dumping and Cracking the local user accounts from the SAM database

Let’s talk about the hash crack through post / hashdump and john (john the ripper) of the Metasploit module. Once the meterpreter shell is injected and driven into the target...

Exploitation / Information Gathering / Maintaining Access / Network PenTest / Post Exploitation / Vulnerability Analysis / Web Exploitation / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest

December 21, 2016

Penetration Testing in the Real World

A penetration test (pentest for short) is a method of attacking a computer’s systems in the hope of finding weaknesses in its security. If the pentest successfully gains access, it...

Exploitation / Information Gathering / Maintaining Access / Metasploit / Network PenTest / Post Exploitation / Vulnerability Analysis / Web Exploitation / Web Information Gathering / Web Maintaining Access / Web Vulnerability Analysis / WebApp PenTest

December 15, 2016

Penetration-Testing-Toolkit: A web interface to automate Penetration Testing

Penetration Testing Toolkit A web interface to automate Scanning, Generating metasploit payload, Network Testing,Exploring CMS,Information Gathering,DNS Queries,IP Tools,Domain tools and much more. Features Includes web interface for different tools for...

Network PenTest / Post Exploitation

November 30, 2016

WinPirate – grabs browser passwords, history, and network passwords on locked computer

Automated sticky keys hack. Post exploitation it grabs browser passwords, history, and network passwords Download git clone https://github.com/pourquoibenoit/WinPirate.git This project is still in progress Estimated Completion Date: soon…ish Here’s the plan....

Network PenTest / Post Exploitation

November 5, 2016

ProcDump: Dump HTTPS pasword in browser memory

ProcDump is a command-line utility whose primary purpose is monitoring an application for CPU spikes and generating crash dumps during a spike that an administrator or developer can use to...