Tag Info

Hot answers tagged

8

Ran into the same issue when reproducing. UPDATE: When using the windows/local/ask exploit, it seems you do not need to set a payload with it. In the windows/local/ask exploit you can set a reference to the undetectabletrojan.exe, which will then be executed with elevated privileges through UAC. However, as pointed out by @SilverlightFox, the ask exploit ...


4

The communication between computer goes both ways, so there can be two cases: The RAT is a server: this is the case for many well-known and legit remote access tools, like remote desktop, VNC etc... In this case, you need to allow port forwarding on your router to be able to access the computer. The RAT is a client: the tool will try to connect to a ...


3

A very common and highly-modernized attack is running AntiDetect on FraudFox. Criminally-minded adversaries discuss using these tools on leakforums, among other dark corners of the Internet. Obligatory video here -- https://www.youtube.com/watch?v=ZQN7CyCXh90 FraudFox is a guest VM used to hide digital fingerprints. More information here -- ...


3

Usually the main purpose of a VM is to prevent accidental leaks that may compromise someone's anonymity (by preventing the VM from communicating via anything but Tor), however in your case I assume you have consent from the website's owner to do the pentest so even if you do leak some data that may identify you, it's not a big deal. As far as anonymity to ...


2

The cookies could contain anything, and the vulnerability isn't as much about what they contains, as it's about the fact that they can be accessed. The "Apache HTTP Server httpOnly Cookie Information Disclosure" vulnerability is, in combination with for example a XSS attack, a way to get access to the contents of cookies carrying the httpOnly-flag. An ...


2

Yes, you are responsible for addressing any gaps that you are aware of. It does not matter how you became aware you had a 1.3.8 violation; you're responsible for remediating it. The fact that it doesn't meet the threshold for remediation under 11.3 is not relevant.


1

Only in the early days of hacking did RATs require the lack of firewall in order for the controller to connect. Take the famous example of SubSeven -- the RAT would install, and join an IRC channel advertising a port and IP address. If the victim was behind a firewall, the machine could not be manipulated -- the hacker would just get a connection timeout. ...


1

Setting the TECHNIQUE option to PSH for Powershell appeared to solve my AV evasion problem. Anti-virus does not detect malicious Powershell code nearly as well (if at all) as executable code. Thanks to @Michael for his answer, although exploit/windows/local/ask appeared to overwrite the manually uploaded payload with whatever was set in FILENAME during my ...



Only top voted, non community-wiki answers of a minimum length are eligible