Simple script for the purpose of finding remote (https://www.kitploit.com/search/label/Remote) connections to Windows (https://www.kitploit.com/search/label/Windows) machine and ideally some public IPs. It checks for some EventIDs regarding remote logins and sessions. You should pip install -r requirements.txt so the script can work and parse some of the .evtx files inside winevt folder.
The winevt/Logs folders and the script must have identical file path. Execution Example
The winevt/Logs folders and the script must have identical file path. Execution Example
Download Winevt_Logs_Analysis (https://github.com/georgi-i/winevt_logs_analysis)
After trying Medium to host my blog didn’t match my expectations. Good news is that I was able to export all my old entries, so there is…Continue reading on Medium » (https://medium.com/@TheUnwearyPentester/see-you-in-https-pentesting-academy-59ee6ef43ec2?source=rss------bug_bounty-5)
See you in https://pentesting.academy
After trying Medium to host my blog didn’t match my expectations. Good news is that I was able to export all my old entries, so there is…Continue reading on Medium »
Read more...
After trying Medium to host my blog didn’t match my expectations. Good news is that I was able to export all my old entries, so there is…Continue reading on Medium »
Read more...
Hacking Articles Tips Tricks Videos Tutorials
Photo
KitPloit - PenTest Tools!
Winevt_Logs_Analysis - Searching .Evtx Logs For Remote Connections
https://blogger.googleusercontent.com/img/a/AVvXsEgc772rCUbvf89xsBcsZM-HLngIxNttLzMIQlS1TZ00P6LgfViU5R9KgGmqgb1T2TG04h-SUoyfF-I4oEkFjaRwg9vpbuYKGBiHwMJRToYrVK9PDHbO1rhlR4BgTfyg11Yk1qsOAw4wxHueavx6V3uraOcbYWUM3I3t56VEQZpalUIbRp4qfDjuvAZSXQ=w640-h208
Simple script for the purpose of finding remote connections to Windows machine and ideally some public IPs. It checks for some EventIDs regarding remote logins and sessions.
You should pip install -r requirements.txt so the script can work and parse some of the .evtx files inside winevt folder.
The winevt/Logs folders and the script must have identical file path.
Execution Example
https://blogger.googleusercontent.com/img/a/AVvXsEjYl8lPZLIe3AFfPvcgTvKBp7bLjn8SWp6h7o5fKyjZEEKZickcxVYmhdIhuB8EtSdacAaFLbBQ4dTNs72mPaE0NYAZ9Cif7JBBSrE06Wj8S0IfIq48FnG47oTrB9OObg0e2UGsRIVu9eJer85uxVir1lBhLds-IK5Xfcm1D48kpnN6xwv3fIyHeCP7vA=w640-h138
Result Example
https://blogger.googleusercontent.com/img/a/AVvXsEgc772rCUbvf89xsBcsZM-HLngIxNttLzMIQlS1TZ00P6LgfViU5R9KgGmqgb1T2TG04h-SUoyfF-I4oEkFjaRwg9vpbuYKGBiHwMJRToYrVK9PDHbO1rhlR4BgTfyg11Yk1qsOAw4wxHueavx6V3uraOcbYWUM3I3t56VEQZpalUIbRp4qfDjuvAZSXQ=w640-h208
Download Winevt_Logs_Analysis
Winevt_Logs_Analysis - Searching .Evtx Logs For Remote Connections
https://blogger.googleusercontent.com/img/a/AVvXsEgc772rCUbvf89xsBcsZM-HLngIxNttLzMIQlS1TZ00P6LgfViU5R9KgGmqgb1T2TG04h-SUoyfF-I4oEkFjaRwg9vpbuYKGBiHwMJRToYrVK9PDHbO1rhlR4BgTfyg11Yk1qsOAw4wxHueavx6V3uraOcbYWUM3I3t56VEQZpalUIbRp4qfDjuvAZSXQ=w640-h208
Simple script for the purpose of finding remote connections to Windows machine and ideally some public IPs. It checks for some EventIDs regarding remote logins and sessions.
You should pip install -r requirements.txt so the script can work and parse some of the .evtx files inside winevt folder.
The winevt/Logs folders and the script must have identical file path.
Execution Example
https://blogger.googleusercontent.com/img/a/AVvXsEjYl8lPZLIe3AFfPvcgTvKBp7bLjn8SWp6h7o5fKyjZEEKZickcxVYmhdIhuB8EtSdacAaFLbBQ4dTNs72mPaE0NYAZ9Cif7JBBSrE06Wj8S0IfIq48FnG47oTrB9OObg0e2UGsRIVu9eJer85uxVir1lBhLds-IK5Xfcm1D48kpnN6xwv3fIyHeCP7vA=w640-h138
Result Example
https://blogger.googleusercontent.com/img/a/AVvXsEgc772rCUbvf89xsBcsZM-HLngIxNttLzMIQlS1TZ00P6LgfViU5R9KgGmqgb1T2TG04h-SUoyfF-I4oEkFjaRwg9vpbuYKGBiHwMJRToYrVK9PDHbO1rhlR4BgTfyg11Yk1qsOAw4wxHueavx6V3uraOcbYWUM3I3t56VEQZpalUIbRp4qfDjuvAZSXQ=w640-h208
Download Winevt_Logs_Analysis
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Is there any way to monitor network remotely?
I have an employee that I suspect is stealing and planning on taking customers. No cameras in place. I’ve seen messages pop up that they delete referring to theft and downright trying to ruin my business. They’ve put themselves in a position where leaving or me firing them jeopardizes everything. Need ammo for court case when the inevitable happens. Is there’s a way to monitor email and texts sent over our wifi? I’d really like to download their text history but I’m sure that’s illegal so won’t go there, unless of course it’s not.
submitted by /u/sen_clay_davis1
[link] [comments]
Is there any way to monitor network remotely?
I have an employee that I suspect is stealing and planning on taking customers. No cameras in place. I’ve seen messages pop up that they delete referring to theft and downright trying to ruin my business. They’ve put themselves in a position where leaving or me firing them jeopardizes everything. Need ammo for court case when the inevitable happens. Is there’s a way to monitor email and texts sent over our wifi? I’d really like to download their text history but I’m sure that’s illegal so won’t go there, unless of course it’s not.
submitted by /u/sen_clay_davis1
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
hacking: security in practice
Dumb me Run an .exe virus on my PC
I was dumb, yet again. Apparently, this is my year. And you guys were so helpful a couple of weeks ago that I come back to the community to seek some guidance and help. Ok so to make a long story short... I downloaded a file that shouldn't have downloaded and run an exe file that I shouldn't have run (bare in mind, it is something I needed to do, for work), wither way... MY antivirus blocked it from running, and stupid me tried to run it once again as an administrator (yeah... my self destruction instinct was strong in this one) but my golden antivirus once again blocked it from running... however now I am scared that by doing that stupidity a ransomware or a rat might have entered my system (which are the malware things I fear the most, since I am not a millionaire and live my day to day surviving of which I can get in my bank account to pay rent, food and help my mother). I also used Malwarebytes and it came out as 0 detections. Should I be worried and take action or was it a close call?
submitted by /u/BeetleLady
[link] [comments]
Dumb me Run an .exe virus on my PC
I was dumb, yet again. Apparently, this is my year. And you guys were so helpful a couple of weeks ago that I come back to the community to seek some guidance and help. Ok so to make a long story short... I downloaded a file that shouldn't have downloaded and run an exe file that I shouldn't have run (bare in mind, it is something I needed to do, for work), wither way... MY antivirus blocked it from running, and stupid me tried to run it once again as an administrator (yeah... my self destruction instinct was strong in this one) but my golden antivirus once again blocked it from running... however now I am scared that by doing that stupidity a ransomware or a rat might have entered my system (which are the malware things I fear the most, since I am not a millionaire and live my day to day surviving of which I can get in my bank account to pay rent, food and help my mother). I also used Malwarebytes and it came out as 0 detections. Should I be worried and take action or was it a close call?
submitted by /u/BeetleLady
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
How you can hack the “Certified Ethical Hacker” exam and become an ethical hacker.
https://cdn-images-1.medium.com/max/2600/1*TYpOYGoII4CH8co0oM7P1w.jpeg
EC-Council CEH exam consists of 125 closed questions and the passing score can vary from 60 to 85% depending on the level of difficulty of…
Continue reading on Medium »
How you can hack the “Certified Ethical Hacker” exam and become an ethical hacker.
https://cdn-images-1.medium.com/max/2600/1*TYpOYGoII4CH8co0oM7P1w.jpeg
EC-Council CEH exam consists of 125 closed questions and the passing score can vary from 60 to 85% depending on the level of difficulty of…
Continue reading on Medium »
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
Top 7 Ehical Hacking Expertise An Expert Ehical Programmer Required
https://cdn-images-1.medium.com/max/2600/1*0dvgqAAhGLppg8lLuHDMZg.png
Like some other calling, moral programmers require a bunch of abilities to make progress. Peruse the article to be aware of the main 7…
Continue reading on Medium »
Top 7 Ehical Hacking Expertise An Expert Ehical Programmer Required
https://cdn-images-1.medium.com/max/2600/1*0dvgqAAhGLppg8lLuHDMZg.png
Like some other calling, moral programmers require a bunch of abilities to make progress. Peruse the article to be aware of the main 7…
Continue reading on Medium »