Hacking Articles Tips Tricks Videos Tutorials

PowerShell Empire StarKiller - Standard Account - KeePass Master Password Extraction (Version 2.52)
https://www.reddit.com/r/redteamsec/comments/yixl91/powershell_empire_starkiller_standard_account/

KeePass Password Managers are highly recommended and used in global companies, but also targeted by threat actors. Therefore, attackers having a foothold with limited privileges (Standard User) to the machine can identify if KeePass is running by listing the processes and unauthorized download the .KDBX KeePass Database file. While the KeePass Database file is opened, the password is stored in Plain Text in Memory which allows intruders to load scripts such as "KeeThief" to extract the Master Password and gain access to the compromised user credentials. KeePass Version: 2.52 (Latest Version, dated 01/11/2022) https://www.youtube.com/watch?v=I3-ixb9wnWg submitted by /u/EpicOfAllEpics (https://www.reddit.com/user/EpicOfAllEpics)
[link] (https://www.reddit.com/r/redteamsec/comments/yixl91/powershell_empire_starkiller_standard_account/) [comments] (https://www.reddit.com/r/redteamsec/comments/yixl91/powershell_empire_starkiller_standard_account/)

___________________________
@hacking_Attack
@Hacking_Video

PowerShell Empire StarKiller - Standard Account - KeePass Master...

KeePass Password Managers are highly recommended and used in global companies, but also targeted by threat actors. Therefore, attackers having a...

10 viewsedited 04:02

10 views04:05

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
I ended up leaving a trail after accessing sensitive documents at work. I think I'm gonna be fired, I'm shaking.

I found a very simple backdoor into some VERY sensitive work documents at work. Everything from direct deposits/banking. I only wanted to see my co-workers reprimand files. I'm deleting the google drive I accessed them with and making a new one. Only downside would be losing my YouTube history and all the comments I've made. Let's hope my regional manager is blind or I'm dead. I'm scared guys, I'm shaking.

Also if I do get caught, what would you recommend to properly secure such sensitive information on google drive, that I a lowly retail worker could access such files. I shared a training manual to my google drive, poked around the links inside the documents to external google drives and found a way into the management files.

Any idea how to save myself? What could happen to me? Is my accidental access illegal?

submitted by /u/bioshockbitch
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

I ended up leaving a trail after accessing sensitive documents at...

I found a very simple backdoor into some VERY sensitive work documents at work. Everything from direct deposits/banking. I only wanted to see my...

10 viewsedited 04:05

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Chinese Hacking group "Cicada" exploits anti-virus in new attack

https://external-preview.redd.it/AZUWoUI_JZQEtz1HhIizL5OglM8RxggqXbfxt2B5X7k.jpg?width=640&crop=smart&auto=webp&s=f5fbfd5c050556cbf47a00ff1647b86105e42c56 submitted by /u/zenmondo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Chinese Hacking group "Cicada" exploits anti-virus in new attack

Posted in r/hacking by u/zenmondo • 10 points and 0 comments

10 viewsedited 04:05

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
assuming no faults, how can a router be attacked for it to lose its internet connection?

Would some form of DOS disconnect a router from the network requiring a restart or if not what would?

submitted by /u/tiddlywinks2661
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

assuming no faults, how can a router be attacked for it to lose...

Would some form of DOS disconnect a router from the network requiring a restart or if not what would?

8 viewsedited 04:06

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
PowerShell Empire StarKiller - Standard Account - KeePass Master Password Extraction (Version 2.52)

KeePass Password Managers are highly recommended and used in global companies, but also targeted by threat actors.

Therefore, attackers having a foothold with limited privileges (Standard User) to the machine can identify if KeePass is running by listing the processes and unauthorized download the .KDBX KeePass Database file.

While the KeePass Database file is opened, the password is stored in Plain Text in Memory which allows intruders to load scripts such as "KeeThief" to extract the Master Password and gain access to the compromised user credentials.

KeePass Version: 2.52 (Latest Version, dated 01/11/2022)

https://www.youtube.com/watch?v=I3-ixb9wnWg

submitted by /u/EpicOfAllEpics
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

PowerShell Empire StarKiller - Standard Account - KeePass Master...

KeePass Password Managers are highly recommended and used in global companies, but also targeted by threat actors. Therefore, attackers having a...

8 viewsedited 04:06

Hacking Articles Tips Tricks Videos Tutorials

8 views07:02

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
You Must Know These Nmap Scans

https://cdn-images-1.medium.com/max/832/1*wfIIJzzYUDNAuggI34EgOA.png
Do you know them all? Test your knowledge.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

You Must Know These Nmap Scans

Do you know them all? Test your knowledge.

8 viewsedited 07:02