Collaborate Disseminate
For example, I know a password has to have at least 3 symbols, but I don’t know where those symbols are. What is the simplest way to specify this when cracking the password with hashcat? The only method I found was through a .hcmask file a… Continue reading In hashcat, is there a simple way to set the amount of symbols in the password?
We are performing a Red Team engagement for a client. We have obtained a user’s STDID file, their PIN, and one output of their token. However, to fully obtain the access granted by their MFA we also require their token import password, whi… Continue reading Is it possible to bruteforce SecurID soft tokens?
I am running Responder on Kali Linux within a client network using the following command
sudo responder -I eth0 -w -r -d
which is capturing many hashes in the environment. Responder is a LLMNR, NBT-NS and MDNS poisoner used for MITM attac… Continue reading Running Responder outputs many hashes per user, how is this possible?
I attempted to run socat on Windows 10, however when executed it showed the following error:
0 [main] socat 5536 find_fast_cwd: WARNING: Couldn’t compute FAST_CWD pointer. Please report this problem to the public mailing list cygwin@cygwi… Continue reading Is socat broken at the moment? [migrated]
I have two lab machines, one Kali and one Windows 10. Netcat is running on both and both are communicating successfully. If I create a simple text file I can transfer the file from Kali onto Windows no problem. However, if I run the follow… Continue reading Why can’t I transfer executable files with netcat?
As far as I can tell, scheduled tasks may only be created by those in the Administrators group by default. Does that mean that persistence can’t be achieved via this method without gaining elevated privileges?
Continue reading Is persistence via scheduled tasks possible if the user is not elevated?
We are running a purple team which includes attempting to run a malicious PDF on the target system. The targeted user is well aware of the exercise so there is no concerns about an AV picking the payload up, or about prompts (the user can … Continue reading Is it impossible to have a PDF file execute a command without abusing any exploits?
For example, I found two websites that mimic my domain name perfectly eg mydomainname.com, with the two offending websites being mydomainname.bw and mydomainname.br. However the domains are not linked to any IP, nor do they have any WHOIS … Continue reading What does it mean if a domain does not have any WHOIS information available?
Let’s say I look up a domain on WhoIs and see that the Registrant Organization is Example Company. How sure can I be that the domain actually belongs to Example Company? Can a malicious actor just say they are working on behalf of Example … Continue reading How reliable are Whois records? Can they be faked, and if so, how easily? [closed]
QBot is a banking trojan that’s over 12 years old. Recently it received some updates as documented by F5 labs here: https://www.f5.com/labs/articles/threat-intelligence/qbot-banking-trojan-still-up-to-its-old-tricks
What I’m confused about… Continue reading What does it mean for Qbot to "target" certain banks?