aigh enough of the jokes ena malet am planing to post some advanced APT level shii from now on hmm which will strength us as a community

u ready right ??

@AfroSec

okay here it goes

how many of u guys actually use c2 ? like for learning and shii may be work stuff
if u are not using it am telling u that u are missing a lotta shii there fr
i will share the matrix there are a lot of them around 170 if am not wrong which some of them are paid ( but u can find the cr4cked one hmm :)) ) and most of them are open source

@AfroSec

https://docs.google.com/spreadsheets/d/1b4mUxa6cDQuTV2BPC6aA-GR4zGZi0ooPYtBe4IgPsSc/edit?gid=0#gid=0

check them out here

@AfroSec

https://howto.thec2matrix.com/

kinda manual thingy

@AfroSec

if u ask me why i get mad sometimes, cuz there is no real group in ethio for discussing real red team engagement and stuff like that

so far i didnt see any group, we need to move faster 😏

knowing idor or other owasp doesnt make us red teamer or knowing about what red teaming doesnt make us red teamer unless we make our hand dirty with that thing, just saying yk

what i like to say is that from now on this channel is for red team and red team only fr 💪

@AfroSec

i know am late but so sorry
EID Mubarak my Muslim friends 🙏🎉🎉🎉

@AfroSec

am saying this Ethically btw 😄 dont get me wrong fam

@AfroSec

eth orgs dont even check their logs (especially web) enji snt gud yweta neber mtsm 🥀🥀😭😂

but who cares, request is free right as long as we dont disrupt their business lol :)

@AfroSec

just a lil bit setup update will add some led shii soon 😉

@AfroSec

So… u just landed initial access on a server or compromised an org's system.
What’s next then ?
sudo rm -rf / 🙃? Nah

u need a solid plan and decent infrastructure that guarantees persistence for as long as you want without having to re-exploit the same vuln over and over :(
That’s where proper infra becomes the game-changer in here .
Just running a C2 framework doesn’t magically make us anonymous or stealthy we need infrastructure OPSEC layered with serious evasion techniques and a deep plan to stay hidden through out the engagement.
In my view, we should already know exactly how to deploy and harden the full infra stack:

C2 server
Payload hosting
Phishing kit / landing pages
Redirectors (multiple layers)
Other supporting pieces

I’ve got some resources in hand so will share it to u guys,
just finished spinning up a Discord server for the discussion / sharing. Will drop the link once I’ve customized it properly (rules, channels, etc.).
so u guys down to follow along, share tips, or collab on hardening this kind of infra?

@AfroSec

aigh fam

lets see email security in a nutshell
topic sounds lame but absolute masterpiece

why do you think some emails go to spam folder also why does those emails flagged by email-gateways ??

@AfroSec

so there are 3 DNS records which have impact on email sec
> SPF
> DKIM
> DMARC
lets see each one of them

SPF:- Sender Policy Framework
> lists which servers are allowed to send email for your domain
> for instance example.com's SPF record says like :"only 192.168.x.x can send an email as @example.com"

DKIM:- DomainKeys Identified Mail
> when you send an email, your server stamps it with a unique, invisible signature. when the receiving server gets it, they check that signature against your domain’s public key, if your mail lack this one it will get rejected entirely or flagged as spam

DMARC:- Domain-based Message Authentication, Reporting & Conformance
> simply Tells receiving servers what to do with emails that fail SPF/DKIM checks


so from our RedTeam perspective we will check those records which is kinda passive recon thing,
then if the server miss one of those like
1, No SPF rec
2, SPF and DKIM but No DMARC
3, No SPF and No DMARC

those are our jackpots kinda a way in ;), how ?

social engineering comes to play here 
we can send an email as example.com for that example.com employee which have initial access payload either it could be macros, Dll side loading or anykinda thing that u prepare for ur foothold

the main and good thing is email gateways and browsers wont flag for MOTW  that attachment why because we  just send that email as internal email with trusted domain :)) lucky us huh ?

if u ask me what MOTW is here is the post i wrote abt it > https://t.me/AfroSec/765

@AfroSec

https://www.mail-tester.com/

kinda cool resource to check for email Spammyness ;)

@AfroSec

https://anshu19981.github.io/Pentestcheatsheet

@AfroSec

yoo so i just created a Red Team Discord

If you're into hacking, redteaming ofc , or learning real-world security come join us.

👉 https://discord.gg/t4tcrF95

Let’s grow and learn together :))

@AfroSec