Hacking Articles Tips Tricks Videos Tutorials

PowerShell Empire StarKiller - Standard Account - KeePass Master Password Extraction (Version 2.52)
https://www.reddit.com/r/redteamsec/comments/yixl91/powershell_empire_starkiller_standard_account/

KeePass Password Managers are highly recommended and used in global companies, but also targeted by threat actors. Therefore, attackers having a foothold with limited privileges (Standard User) to the machine can identify if KeePass is running by listing the processes and unauthorized download the .KDBX KeePass Database file. While the KeePass Database file is opened, the password is stored in Plain Text in Memory which allows intruders to load scripts such as "KeeThief" to extract the Master Password and gain access to the compromised user credentials. KeePass Version: 2.52 (Latest Version, dated 01/11/2022) https://www.youtube.com/watch?v=I3-ixb9wnWg submitted by /u/EpicOfAllEpics (https://www.reddit.com/user/EpicOfAllEpics)
[link] (https://www.reddit.com/r/redteamsec/comments/yixl91/powershell_empire_starkiller_standard_account/) [comments] (https://www.reddit.com/r/redteamsec/comments/yixl91/powershell_empire_starkiller_standard_account/)

___________________________
@hacking_Attack
@Hacking_Video

PowerShell Empire StarKiller - Standard Account - KeePass Master...

KeePass Password Managers are highly recommended and used in global companies, but also targeted by threat actors. Therefore, attackers having a...

10 viewsedited 04:02

10 views04:05

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
I ended up leaving a trail after accessing sensitive documents at work. I think I'm gonna be fired, I'm shaking.

I found a very simple backdoor into some VERY sensitive work documents at work. Everything from direct deposits/banking. I only wanted to see my co-workers reprimand files. I'm deleting the google drive I accessed them with and making a new one. Only downside would be losing my YouTube history and all the comments I've made. Let's hope my regional manager is blind or I'm dead. I'm scared guys, I'm shaking.

Also if I do get caught, what would you recommend to properly secure such sensitive information on google drive, that I a lowly retail worker could access such files. I shared a training manual to my google drive, poked around the links inside the documents to external google drives and found a way into the management files.

Any idea how to save myself? What could happen to me? Is my accidental access illegal?

submitted by /u/bioshockbitch
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

I ended up leaving a trail after accessing sensitive documents at...

I found a very simple backdoor into some VERY sensitive work documents at work. Everything from direct deposits/banking. I only wanted to see my...

10 viewsedited 04:05

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Chinese Hacking group "Cicada" exploits anti-virus in new attack

https://external-preview.redd.it/AZUWoUI_JZQEtz1HhIizL5OglM8RxggqXbfxt2B5X7k.jpg?width=640&crop=smart&auto=webp&s=f5fbfd5c050556cbf47a00ff1647b86105e42c56 submitted by /u/zenmondo
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Chinese Hacking group "Cicada" exploits anti-virus in new attack

Posted in r/hacking by u/zenmondo • 10 points and 0 comments

10 viewsedited 04:05

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
assuming no faults, how can a router be attacked for it to lose its internet connection?

Would some form of DOS disconnect a router from the network requiring a restart or if not what would?

submitted by /u/tiddlywinks2661
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

assuming no faults, how can a router be attacked for it to lose...

Would some form of DOS disconnect a router from the network requiring a restart or if not what would?

8 viewsedited 04:06

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
PowerShell Empire StarKiller - Standard Account - KeePass Master Password Extraction (Version 2.52)

KeePass Password Managers are highly recommended and used in global companies, but also targeted by threat actors.

Therefore, attackers having a foothold with limited privileges (Standard User) to the machine can identify if KeePass is running by listing the processes and unauthorized download the .KDBX KeePass Database file.

While the KeePass Database file is opened, the password is stored in Plain Text in Memory which allows intruders to load scripts such as "KeeThief" to extract the Master Password and gain access to the compromised user credentials.

KeePass Version: 2.52 (Latest Version, dated 01/11/2022)

https://www.youtube.com/watch?v=I3-ixb9wnWg

submitted by /u/EpicOfAllEpics
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

PowerShell Empire StarKiller - Standard Account - KeePass Master...

KeePass Password Managers are highly recommended and used in global companies, but also targeted by threat actors. Therefore, attackers having a...

8 viewsedited 04:06

Hacking Articles Tips Tricks Videos Tutorials

8 views07:02

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
You Must Know These Nmap Scans

https://cdn-images-1.medium.com/max/832/1*wfIIJzzYUDNAuggI34EgOA.png
Do you know them all? Test your knowledge.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

You Must Know These Nmap Scans

Do you know them all? Test your knowledge.

8 viewsedited 07:02

Hacking Articles Tips Tricks Videos Tutorials

8 views07:02

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Niural’s Hackathon: Aurora ’22

https://cdn-images-1.medium.com/max/1600/1*XZqib9Fd6Eg_CSL3jLtzpw.png
The hottest payments x financial identity hackathon in web3

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Niural’s Hackathon: Aurora ’22

The hottest payments x financial identity hackathon in web3

9 viewsedited 07:02

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
How to brute force into old emails?

How would I go about accessing an old email I forgot the password to? I was quite young when I made it and I’ve used several passwords through the years. This password is connected to an older Xbox 360 Gamertag as well that I’m dying to have back. I haven’t had access to the email since about 2015 I suppose, those were the last times I received emails from that account to my current email regarding school projects

submitted by /u/biggestboy96
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How to brute force into old emails?

How would I go about accessing an old email I forgot the password to? I was quite young when I made it and I’ve used several passwords through the...

9 viewsedited 08:08

Hacking Articles Tips Tricks Videos Tutorials

Red Teaming TTPs
https://medium.com/@reconshell.com/red-teaming-ttps-1e89f4fee33e?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

Red Teaming TTPs

Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!

10 viewsedited 08:20

Hacking Articles Tips Tricks Videos Tutorials

10 views08:20