Collaborate Disseminate
I’ve been playing around with the EternalBlue exploit recently. I’ve downloaded a Windows 10 iso file from 2016 and used it to set up a Windows 10 Pro VM as my sandbox. I also ran the nmap script and metasploit scanner module to ensure tha… Continue reading RubySMB::Error::CommunicationError: Read timeout expired when reading from the Socket (timeout=30)
With more people than ever before going online to pay for things and pay each other, startups that are building the infrastructure that enables these actions continue to get a lot of attention. In the latest development, Paysend, a fintech that has built a mobile-based payments platform — which currently offers international money transfers, global […] Continue reading UK’s Paysend raises $125M at a $700M+ valuation to expand its all-in-one payments platform
There’s lots of "SMB is bad" parrotting online, and whenever I look closely, these claims are either unsubstantiated, or apply to unpached or misconfigured Windows servers or old versions of the SMB protocol.
If I put stuff like … Continue reading Is SMB3-only Samba secure?
I’m trying to recreate a Watering hole SMB theft attack where you send a victim a link to your website containing code like file://ip/file.gif.
Causing forced authentication which passes the NTLM hash.
I have the code which executes the pr… Continue reading Watering Hole Website NTLM Steal Attack
I was alarmed by the network monitoring team that there is some UDP traffic headed to the Internet on port 137 which was detected as SMB traffic by our monitoring solution. What is interesting is that this traffic starts as soon as I log i… Continue reading Unknown NbtNS Traffic Leaving My PC
We recently switched to a Synology enterprise setup at work and we’re hoping to benefit from the additional logging that comes with Synology software. In response to a security incident, I found log entries that suggested a user accessed a… Continue reading Synology logs SMB "Read" event false positives
Microsoft Exchange servers around the world are still getting compromised via the ProxyLogon (CVE-2021-26855) and three other vulnerabilities patched by Microsoft in early March. While the initial attacks were attributed by Microsoft to a threat actor … Continue reading As attacks on Exchange servers escalate, Microsoft investigates potential PoC exploit leak
I’m new to the OSCP certification, and in lab 1, I need to solve Kioptrix level 1. In the OSCP webinar, I follow the same step as my instructor; everything seam to works just fine except the last step, which is connecting to Kioptrix throw… Continue reading Kioptrix level 1 SMB problem connecting [migrated]
60 percent of companies go out of business after a cyberattack. Here’s why that happens and how to prevent your business from becoming a statistic.
The post 60% of Companies Go Out of Business After a Cyberattack appeared first on Security Boulevard.
Continue reading 60% of Companies Go Out of Business After a Cyberattack
Social media phishing scammers are proliferating as cybercriminals look for ways to capture credentials & data in a challenging economy.
The post Don’t Make Friends With Social Media Phishing Scammers appeared first on Security Boulevard.
Continue reading Don’t Make Friends With Social Media Phishing Scammers