Exploitation / Metasploit / Network PenTest
by do son · Published July 28, 2017 · Last modified October 25, 2022
Shellter Shellter is a dynamic shellcode injection tool, and the first truly dynamic PE infector ever created. It can be used in order to inject shellcode into native Windows applications (currently 32-bit applications only)....
Exploitation / Metasploit / Network PenTest
by do son · Published July 25, 2017 · Last modified August 6, 2017
Msfvenom is the combination of payload generation and encoding. It replaced msfpayload and msfencode on June 8th 2015. To start using msfvenom, first please take a look at the options it supports: Linux Windows...
This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several different sources. Installation Setting up samba shares: 1.) apt-get install samba 2.) vi/nano/whatever /etc/samba/smb.conf 3.) add the...
Exploitation / Metasploit / Network PenTest
by do son · Published July 21, 2017 · Last modified August 5, 2017
Tool Name: MeterSSH Written by: David Kennedy Company: TrustedSec Website: https://www.trustedsec.com Twitter: @TrustedSec, @HackingDave MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask...
Metasploit / Network PenTest / Sniffing & Spoofing
by do son · Published July 19, 2017 · Last modified August 5, 2017
Man-in-the-middle attack Abbreviated as MITMA, a man-in-the-middle attack is an attack where a user gets between the sender and receiver of information and sniffs any information being sent. In some cases, users may be...
Metasploit / Network PenTest / Post Exploitation
by do son · Published July 18, 2017 · Last modified August 4, 2017
User Account Control, UAC is a feature introduced with Windows Vista to provide an extra security by preventing administrative rights to programs unless approved by the user. Below is a picture of the UAC confirmation dialog box a user may...
Maintaining Access / Metasploit / Network PenTest
by do son · Published July 4, 2017 · Last modified August 2, 2017
The Metasploit Project is a computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development. Its best-known sub-project is the open source Metasploit Framework, a tool for developing and executing exploit code against a remote target machine. Other important sub-projects...
Information Gathering / Metasploit / Network PenTest
by do son · Published July 2, 2017 · Last modified February 7, 2018
On your penetration testing, finding ports and services is important. In the real world, I exploited some systems by identifying open ports and try to attack this port. This articles, I am going to...
Exploitation / Metasploit / Network PenTest
by do son · Published June 27, 2017 · Last modified August 1, 2017
CVE-2017-6334 dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the host_name field of an HTTP POST request, a different vulnerability...
Exploitation / Metasploit / Vulnerability Analysis
by do son · Published June 21, 2017 · Last modified July 31, 2017
Introduction to Nessus Nessus is a vulnerability scanning and analysis software from tenable, a leading information security services company, known as “the world’s most popular vulnerability scanner, used by more than 75,000 organizations worldwide.”...
Metasploit / Network PenTest / Post Exploitation
by do son · Published June 15, 2017 · Last modified May 2, 2018
exploit/windows/local/bypassuac_fodhelper module This module will bypass Windows 10 UAC by hijacking a special key in the Registry under the current user hive, and inserting a custom command that will get invoked when the Windows...
Exploitation / Metasploit / Network PenTest
by do son · Published June 2, 2017 · Last modified July 30, 2017
The Metasploit Project is a computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development. Its best-known sub-project is the open source[2] Metasploit Framework, a tool...
Forensics / Information Gathering / Metasploit / Network PenTest / Vulnerability Analysis / Web Exploitation / Web Information Gathering / Web Vulnerability Analysis / WebApp PenTest
by do son · Published May 19, 2017 · Last modified November 20, 2022
We have filled the world of hackers with infinite fantasy and fear, but with the rise of technology and security in the field of progress, hacking technology has become increasingly common. In fact, network...
Exploitation / Metasploit / Network PenTest
by do son · Published May 18, 2017 · Last modified July 29, 2017
Introduction Windows PowerShell is a command-line shell for Microsoft Windows that is used for system administration. It uses cmdlets (commandlets) that are .NET classes to perform administrative tasks, and can access COM and WMI...
Metasploit / Network PenTest / Vulnerability Analysis
by do son · Published May 15, 2017 · Last modified July 29, 2017
What is MS-17-010? Remote code execution vulnerabilities exist in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests. An attacker who successfully exploited the vulnerabilities could gain the ability...
Secure Your Connection
