Tag Info

New answers tagged

1

If we assume that your procedure is correct then the only purpose of "No Handshake" situation is caused by hardware limitation, i.e.: When your wifi device is 802.11g will not capture the handshake packets which are sent between two 802.11n router and client. Everything will seem to be normal, you can see the frames and Beacons, also you are able to ...


2

What if I want to communicate completely anonymously? Wireless is relatively anonymous from the perspective that you, as a person, won't be easily identified unless your traffic gives you away. That said, your location is identifiable using triangulation and your hardware device ID (MAC) will identify the device used unless you're able to override it. ...


1

As above: hydra -l username -P /root/Desktop/Test.txt url.zz.za http-post-form "/portal/xlogin/:ed=^USER^&pw=^PASS^:S=302"


2

There are lots of Linux distributions with different business models. While most of them probably don't actively spy on their users some deliberately do it: North Korea's Red Star Linux inserts sneaky serial content tracker ERNW security analyst Florian Grunow says North Korea's Red Star Linux operating system is tracking users by tagging content ...


1

To answer your question, I need mention an other opensource product (OpenSSL) in order to make a parallel with Linux and other opensource projects; so let me introduce you a short story about it and hopefully you understand the logic: HeartBleed is a vulnerability that was first introduced by Stephen Henson just an hour before 2011 new year's Eve. To be ...


25

Any time you execute code acquired from someone that you haven't fully reviewed and it runs on an Internet connected system, there is a risk that the person who wrote or deployed that code could transmit data about your usage to another system. That's true regardless of the OS. So yes it's possible. The question then becomes "has this happened in the ...


1

You can upgrade your shell to a Meterpreter with sessions -u <#> and then run post modules (e.g., post/multi/recon/local_exploit_suggestor) or you can also take an existing session (Meterpreter or not) and run a local privilege escalation exploit, e.g., udev_netlink, sock_sendpage, et al, by setting the SESSION variable. Some modules vary by OS or ...


4

At this point you've achieved the basics of a compromise on the system and you're on to the common phase two of exploitation which is privilege escalation. Exactly how you can achieve that depends very much on the system in question, what code is installed on it and how it's configured. Some options for things to look for to get privilege escalation on a ...


0

According to metasploit documentation, user priv is a module alvailable to the native Windows meterpreter only (not other meterpreters). You probably want to look into unix privilege escalation, which i do not know about. I do not believe there's an automated module for metasploit that would do that... Good luck ;)


0

With single-board computers (SBCs) such as the Raspberry Pi 2 (or B+, collectively referred to as "RPI", based on the Broadcom chips) and the USB Armory (based on the Freescale chips), you have to make decisions about how to proceed forward. First of all, Kali on ARM supports LUKS with NUKE -- ...


1

I suggest finding an SMS messaging API that allows you to change the Sender ID. Some of the more popular, well-known SMS messaging APIs such as Twilio do not allow you to change the Sender ID to a random value, for it has to be a valid phone number that you have bought through the Twilio API service. When you do find an API service that allows customers to ...


3

They took it out. You will need to find an old version of the SET kit or an older version of KALI. However the SMS spoofing will fail unless you can find a SMS gateway to use and most will cost money.


1

If you are only about a tool in Kali then you can always use Set ToolKit. For more information on how to use it, you can check this or that.



Top 50 recent answers are included