Collaborate Disseminate
Situation: Trying to perform DNS recon using dnsrecon.py on a network with a Windows 2012R2 as DNS Sevrer (controlled environment – don’t worry).
Problem: dnsrecon.py throws me the following errors — “Error while resolving … Continue reading DNSRecon returns error
I need to figure out a good way to do internal subdomain enumerations in corp network? My goal is to find the list of internal subdomains in my organizations. I tried https://github.com/TheRook/subbrute but this is for extern… Continue reading how to do internal subdomain enumerations in corp network?
After exploiting a system on a remote & unfamiliar network it is extremely important to gain situational awareness as quickly, and quietly as possible. This will help ensure success moving forward with other attacks. In this episode of Tradecraft Security Weekly Beau Bullock (@dafthack) will show how to use PowerShell to query information about the […] Continue reading Situational Awareness with HostRecon – Tradecraft Security Weekly #7
Ethernet cards have a unique MAC address that is assigned during manufacture. If you capture a MAC address, and no other information, can you trace this to an individual?
Perhaps the manufacturers keep records of what MAC ad… Continue reading Is it possible to trace a MAC address to an individual?
Lots of books talk about using tools such as whois and other information gathering tools to collect information on the network and of course, not forgetting nmap. However, in a real network with such a large number of hosts, … Continue reading How do pentesters approach a large complex network?
Dimnie recon trojan has flown under the radar for three years … until now. Continue reading Someone is putting lots of work into hacking Github developers
We seen suspicious probing from source port 53 to destination port 56183. May I know what services use port 56183 (udp)?
Critical infrastructure, media, and scientists targeted by suspected nation-state. Continue reading Hackers who took control of PC microphones siphon >600 GB from 70 targets
I’m trying to do some research on google. I’m using specific keywords like inurl, site, etc…. But google seems to think I’m trying to do harm (actually I’m doing recon on a website for a friend)… So it displays this mess… Continue reading Is there an alternative to google blocked searches?
Often while sharing information on social media, some people may hide PII and yet still allow some aspect of a barcode to leak.
Question
Is there any research that describes how a damaged/obscured barcode can
Describe w… Continue reading How much information does an improperly obscured barcode leak? [on hold]