Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Using my living address
I don’t know if this is the correct sub but I don’t know what to do. Some spammer has gotten my home address and is texting and calling a random person in my hometown about my home’s equity. Only reason I know about it is because they contacted me on fb. What should I do or more importantly what can I tell her to do because she has blocked it before and it doesn’t stop.
submitted by /u/SneakyRobot6131
[link] [comments]
Using my living address
I don’t know if this is the correct sub but I don’t know what to do. Some spammer has gotten my home address and is texting and calling a random person in my hometown about my home’s equity. Only reason I know about it is because they contacted me on fb. What should I do or more importantly what can I tell her to do because she has blocked it before and it doesn’t stop.
submitted by /u/SneakyRobot6131
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Best Messaging software?
I would like to use a software that doesn’t keep track of my Ip or selling my info, I wanna talk to a friend but I don’t want to use discord or telegram
submitted by /u/FamousResponse2726
[link] [comments]
Best Messaging software?
I would like to use a software that doesn’t keep track of my Ip or selling my info, I wanna talk to a friend but I don’t want to use discord or telegram
submitted by /u/FamousResponse2726
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Networking in Cybersecurity: Concepts, Challenges & Solutions
https://cdn-images-1.medium.com/max/640/1*XnYzoxFg-d8v1I8sracJ8A.jpeg
Learn about the various concepts, challenges & solutions to multiple areas of networking in relation to the cybersecurity industry.
Continue reading on Medium »
Networking in Cybersecurity: Concepts, Challenges & Solutions
https://cdn-images-1.medium.com/max/640/1*XnYzoxFg-d8v1I8sracJ8A.jpeg
Learn about the various concepts, challenges & solutions to multiple areas of networking in relation to the cybersecurity industry.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Hawk (htb) writeup
https://cdn-images-1.medium.com/max/695/1*Zi0OriRyLUathKCGMY4ivw.png
Running nmapAutomator.sh shows us a couple of different things to look at.
Continue reading on Medium »
Hawk (htb) writeup
https://cdn-images-1.medium.com/max/695/1*Zi0OriRyLUathKCGMY4ivw.png
Running nmapAutomator.sh shows us a couple of different things to look at.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Home Grown Red Team: Bypassing Applocker, UAC and Getting Administrative Persistence
https://cdn-images-1.medium.com/max/643/1*4jR-qOHQ3hZkJi-s6dnpmQ.png
Welcome back! In my previous post, I showed how we can bypass default Applocker rules using LNK files to get a Havoc beacon.
Continue reading on Medium »
Home Grown Red Team: Bypassing Applocker, UAC and Getting Administrative Persistence
https://cdn-images-1.medium.com/max/643/1*4jR-qOHQ3hZkJi-s6dnpmQ.png
Welcome back! In my previous post, I showed how we can bypass default Applocker rules using LNK files to get a Havoc beacon.
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Windows Isolation & Compartmentalization
https://cdn-images-1.medium.com/max/640/1*PSg5wipY3UA039dTlhWypQ.jpeg
Securing Your Windows: A Step-by-Step Guide to Isolation and Compartmentalization Techniques
Continue reading on Medium »
Windows Isolation & Compartmentalization
https://cdn-images-1.medium.com/max/640/1*PSg5wipY3UA039dTlhWypQ.jpeg
Securing Your Windows: A Step-by-Step Guide to Isolation and Compartmentalization Techniques
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Top five Cyber Threat Intel stories of the week: 01/16 to 01/20/2023
https://cdn-images-1.medium.com/max/1000/0*iRxNeY3RbpYSIJJZ
Top 5 general threat intelligence stories of the week. This is from TLP white/open-source websites, so please feel free to share with…
Continue reading on Hunter Strategy »
Top five Cyber Threat Intel stories of the week: 01/16 to 01/20/2023
https://cdn-images-1.medium.com/max/1000/0*iRxNeY3RbpYSIJJZ
Top 5 general threat intelligence stories of the week. This is from TLP white/open-source websites, so please feel free to share with…
Continue reading on Hunter Strategy »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
When Tech-Savvy Bears Attack: The DNC Hack
https://cdn-images-1.medium.com/max/600/0*PV40QIF61q9sTr4h.png
Once upon a time, in a land far, far away, there was a group of mischievous hackers known as “Fancy Bear”. These bears were not your…
Continue reading on Medium »
When Tech-Savvy Bears Attack: The DNC Hack
https://cdn-images-1.medium.com/max/600/0*PV40QIF61q9sTr4h.png
Once upon a time, in a land far, far away, there was a group of mischievous hackers known as “Fancy Bear”. These bears were not your…
Continue reading on Medium »
Dumping LSASS by CrowdStrike Falcon and Windows Defender
https://www.reddit.com/r/redteamsec/comments/10h7e72/dumping_lsass_by_crowdstrike_falcon_and_windows/
<!-- SC_OFF -->I was able to dump LSASS with DumpThatLSASS from D1rkMtr successfully with Windows Defender and CrowdStrike Falcon enabled. The EDR tools detect the behavior of the LSASS dump but don't stop the process. This was really interesting behavior for a compiled application. https://youtu.be/3nxjPkxGDWo
https://github.com/D1rkMtr/DumpThatLSASS <!-- SC_ON --> submitted by /u/Infosecsamurai (https://www.reddit.com/user/Infosecsamurai)
[link] (https://www.reddit.com/r/redteamsec/comments/10h7e72/dumping_lsass_by_crowdstrike_falcon_and_windows/) [comments] (https://www.reddit.com/r/redteamsec/comments/10h7e72/dumping_lsass_by_crowdstrike_falcon_and_windows/)
https://www.reddit.com/r/redteamsec/comments/10h7e72/dumping_lsass_by_crowdstrike_falcon_and_windows/
<!-- SC_OFF -->I was able to dump LSASS with DumpThatLSASS from D1rkMtr successfully with Windows Defender and CrowdStrike Falcon enabled. The EDR tools detect the behavior of the LSASS dump but don't stop the process. This was really interesting behavior for a compiled application. https://youtu.be/3nxjPkxGDWo
https://github.com/D1rkMtr/DumpThatLSASS <!-- SC_ON --> submitted by /u/Infosecsamurai (https://www.reddit.com/user/Infosecsamurai)
[link] (https://www.reddit.com/r/redteamsec/comments/10h7e72/dumping_lsass_by_crowdstrike_falcon_and_windows/) [comments] (https://www.reddit.com/r/redteamsec/comments/10h7e72/dumping_lsass_by_crowdstrike_falcon_and_windows/)
Smbmap creates directory to check write privileges on SMB Share
https://www.reddit.com/r/redteamsec/comments/10h8kst/smbmap_creates_directory_to_check_write/
<!-- SC_OFF -->When using Smbmap in your Red Team engagement, keep in mind, that Smbmap creates a random directory at the root of each SMB Share to check for write privileges, which makes it less stealthy :0 It deletes that directory afterwards (when no exception is thrown). But the Blue Team can still detect it by listening for file creation events at root directory of every share. The name of the directory is by default 10 characters long and consists of only uppercase letters. So this regex should detect it: ^[A-Z]{10}$ Relevant Method -> https://github.com/ShawnDEvans/smbmap/blob/a771476977cee1b96108b3d0122330cd5fe50819/smbmap.py#L779 Random directory name (if you want to patch it) -> https://github.com/ShawnDEvans/smbmap/blob/a771476977cee1b96108b3d0122330cd5fe50819/smbmap.py#L47 https://preview.redd.it/c88sc2nlm9da1.png?width=1008&format=png&auto=webp&s=1c79c52f3ebc0ca3438e643cf5070a4b5187fd79 <!-- SC_ON --> submitted by /u/JustAnotherRedTeamer (https://www.reddit.com/user/JustAnotherRedTeamer)
[link] (https://www.reddit.com/r/redteamsec/comments/10h8kst/smbmap_creates_directory_to_check_write/) [comments] (https://www.reddit.com/r/redteamsec/comments/10h8kst/smbmap_creates_directory_to_check_write/)
https://www.reddit.com/r/redteamsec/comments/10h8kst/smbmap_creates_directory_to_check_write/
<!-- SC_OFF -->When using Smbmap in your Red Team engagement, keep in mind, that Smbmap creates a random directory at the root of each SMB Share to check for write privileges, which makes it less stealthy :0 It deletes that directory afterwards (when no exception is thrown). But the Blue Team can still detect it by listening for file creation events at root directory of every share. The name of the directory is by default 10 characters long and consists of only uppercase letters. So this regex should detect it: ^[A-Z]{10}$ Relevant Method -> https://github.com/ShawnDEvans/smbmap/blob/a771476977cee1b96108b3d0122330cd5fe50819/smbmap.py#L779 Random directory name (if you want to patch it) -> https://github.com/ShawnDEvans/smbmap/blob/a771476977cee1b96108b3d0122330cd5fe50819/smbmap.py#L47 https://preview.redd.it/c88sc2nlm9da1.png?width=1008&format=png&auto=webp&s=1c79c52f3ebc0ca3438e643cf5070a4b5187fd79 <!-- SC_ON --> submitted by /u/JustAnotherRedTeamer (https://www.reddit.com/user/JustAnotherRedTeamer)
[link] (https://www.reddit.com/r/redteamsec/comments/10h8kst/smbmap_creates_directory_to_check_write/) [comments] (https://www.reddit.com/r/redteamsec/comments/10h8kst/smbmap_creates_directory_to_check_write/)