Collaborate Disseminate
When doing pentestings, the establishment of backdoors is vital to be able to carry out lateral movements in the network or to reach the stage of action on objectives. This is usually accomplished by inviting someone to click on a commonly used executable on the computer using social engineering techniques.
Continue reading Creating patched binaries for pentesting purposes, (Sun, Sep 13th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, September 14th 2020 https://isc.sans.edu/podcastdetail.html?id=7164, (Mon, Sep 14th)
A reader asked about another malicious file, thinking it is an intentionally corrupt ZIP file.
Continue reading Office Documents with Embedded Objects, (Sat, Sep 12th)
Recently I happened to notice that the Cisco AnyConnect VPN client clears the clipboard if you paste a password into it.&#;x26;#;xc2;&#;x26;#;xa0; (Note – if you know and can type any of your passwords in 2020, you should at least partially examine your life choices).&#;x26;#;xc2;&#;x26;#;xa0; Several password managers also do this “right thing” – retaining passwords in the clipboard is a great way for folks to accidentally paste that information into the worst possible place after login (like say into something that&#;x26;#;39;ll post that info into clear text log files), or in the worst case allows it to get stolen post-login.
Continue reading What’s in Your Clipboard? Pillaging and Protecting the Clipboard, (Fri, Sep 11th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, September 11th 2020 https://isc.sans.edu/podcastdetail.html?id=7162, (Fri, Sep 11th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, September 10th 2020 https://isc.sans.edu/podcastdetail.html?id=7160, (Thu, Sep 10th)
In the next couple of months, Apple will likely release its next major update to macOS, “Big Sur” or also called macOS 11. I was able to install the most recent beta version of the operating system in a virtual machine to look at some of the network traffic. This should help you get ready for any oddities you may be seeing as users upgrade.
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, September 9th 2020 https://isc.sans.edu/podcastdetail.html?id=7158, (Wed, Sep 9th)
This month we got patches for 129 vulnerabilities. Of these, 23 are critical and none of them was previously disclosed or is being exploited according to Microsoft.
Continue reading Microsoft September 2020 Patch Tuesday, (Tue, Sep 8th)