Collaborate Disseminate
I have a penetration testing scenario where I am on the network with two machines, Machine A and Machine B. I have complete control over Machine B and am trying to leverage that to get access to Machine A. Machine A appears to be some vari… Continue reading How can you attack or redirect the client from the server over an RDP or SSH conneciton? [closed]
I am not sure whether I accurately captured this question with the title, so let me explain it.
I have a penetration testing scenario where I am on the network with two machines, Machine A and Machine B. I have complete control over Machin… Continue reading What are the ways to attack the client if you have full control of the server, over an RDP or SSH connection?
Enterprises and end-users are constantly reminded of the dangers associated with clicking on unknown links and documents. Images rarely top the list as would-be vulnerabilities, but it’s important to be cautious of these potentially risky files as well… Continue reading A picture is worth a thousand words, but to hackers, it’s worth much more
In 2020, attacks against Windows Remote Desktop Protocol (RDP) grew by 768%, according to ESET. But this shouldn’t come as a surprise, given the massive increase in people working remotely during the pandemic. With enterprises resorting to making RDP s… Continue reading Defending against Windows RDP attacks
How to secure RDP connection to prevent the spread of ransomware from users’ systems when they connect to corporate systems through remote desktop?
I am trying to use "Crowbar" to brute-force RDP login information. The command I am running (on Kali Linux) is:
sudo crowbar -b rdp -U usernames.txt -C rdp_passlist.txt -s <Target IP>
and the result is Crowbar saying every… Continue reading "Crowbar" brute-force tool giving "success" result to every username/password combination for RDP [closed]
We continued our observations and identified a number of trends that could, in our opinion, be due to circumstances connected with the pandemic in one way or another, as well as the reaction of governments, organizations and people to these circumstances. Continue reading Threat landscape for industrial automation systems. Statistics for H2 2020
I’ve inherited a network configuration that I don’t have much ability to change. We have a collection of servers on one network (externally hosted) and we currently have RDP access open to the world. There is no firewall and I have contact… Continue reading Limiting RDP to internal IP from another network [closed]
I’ve inherited a network configuration that I don’t have much ability to change. We have a collection of servers on one network (externally hosted) and we currently have RDP access open to the world. There is no firewall and I have contact… Continue reading Limiting RDP to internal IP from another network [closed]
On the anniversary of the global shutdown, we decided to take a look back at how the threat landscape has evolved since the beginning of the pandemic — and what that means for users in the years to come. Continue reading COVID-19: Examining the threat landscape a year later