Collaborate Disseminate
My current understanding is that an exploit kit will fingerprint (gather information on) a system, check those details against a database of vulnerabilities and then attempt to use the relevant exploits.
I can see simple way… Continue reading How do exploit kits enumerate or fingerprint their targets?
Well the title says it all really. Obviously if they return it’s easy to enable but I’m talking specifically about leavers where there is no intention of returning.
Many places simply disable accounts rather than delete the… Continue reading Is there a security reason to disable a leavers account instead of deleting it?
I am looking for either tools or method that will extract the hashes and store them securely so that they can be placed onto a dedicated cracking station.
Obviously, they need to be transmitted and stored securely. Let’s ass… Continue reading How to safely extract hashes from domain controller for auditing?
Generally speaking, I’m looking at a business environment. I know that Facebook Ads are not vetted and can contain malware, also users can share files on some social media sites. But what else is there? And are there any prac… Continue reading Are social media websites a security risk? If yes, how do we go about making them safer for users? [on hold]
I have heard from different people and in different places that if I send an encrypted file to someone else, I should send them the password in a separate email; but why? If someone is sniffing, they will capture both and if … Continue reading Is it good practice to send passwords in separate emails, and why?
I have read that you can hide processes from the task manager, example here
I’ve seen a few posts on hidden keyloggers using rootkit but that’s it really.
Is there a tool or way to look at processes being run even though th… Continue reading How to find processes that are hidden from task manager