Tag Info

New answers tagged

-2

Before you do airmon-ng start wlan0 You should stop wlan0 with the command: ifconfig wlan0 stop


1

Having both the OSCP and eCPPT Gold qualifications I thought I'd offer my input on this question. Note that I took eCPPT as exam only and did not do the course. Are either of these certifications recognizable and accredited? OSCP is widely recognised within the security community. eCPPT not so much. However, judging from the eCPPT exam, the course ...


3

I don't know for you but I always felt like Android especially is not safe. Is somebody - the government or other - able to listen to my microphone, or access my hard drive remotely? Why do you think Android might be especially vulnerable? I expect the NSA has the tools to snoop in on practically anything connected to the Internet. I'm wondering if ...


3

In general, for penetration testing, you must have acute and precise notions of how computers work. You must basically understand how things go "under the hood". For instance, you do not need to be a god of assembly programming, but you must have some notion of how, conceptually, a buffer overflow can result in hostile hijack of your server from remote ...


4

Sadly I think that such situation isn't new and isn't going to disappear in the near future. I don't know if you ever read the Hacker Manifesto? This text was written in the eighties, but chances are that you will recognize yourself in some aspect of this text... It is interesting in your text that you first explain that you had difficulties to make friend, ...


0

Unless you are undergoing a polygraph examination (in which case you will have already disclosed pertinent answers such as 'have you hacked a system' and are merely being tested on truthfulness of your disclosures) then take the American attitude of anti-self incrimination (the 5th Amendment to the US Constitution). During your interview, simply explain ...


0

It depends on what type of MitM attack you're working with. ARP Poisoning - This only works when you have an Ethernet connection on the LAN, since it works by spoofing identities using OSI Layer 2 technologies, ARP MAC-to-IP bindings. This seems to be the type of attack you are familiar with. BGP Redirection - This works on the Internet since it involves ...


3

Firefox takes hashes of various page parameters (mainly URL segments) and passes them back as part of Google's SafeBrowsing scheme. It cannot readily identify parameters or other information that you pass to the target - it's just used to check against a list of known attack domains. As per these instructions, you can turn SafeBrowse off: Firefox button ...


0

Use a browser plugin such as Cookies Manager Plus on Firefox, then you can simply copy the value to the clipboard. As you say, simply paste the value into the command line for Hydra. See my answer here for the syntax that worked for me. "/dvwa/vulnerabilities/brute/:username=^USER^&password=^PASS^&Login=Login:F=incorrect:H=Cookie: ...


2

The commenter, paj28, is correct: don't submit these to VirusTotal. Test them against the HIPS and AV systems you are specifically targeting in a VM-guest environment. I prefer using Vagrant along with the Packer and Boxcutter tools to "mock up" things in a lab. Hyperion is great, but don't combine it with Pescrambler necessarily. You only need one cryptor, ...


0

The Short answer is Yes, however, like most IoT Devices, you would not be exploiting hardware-specific vulnerabilities, you would likely need to focus on services running on those devices. For example if a IoT device connects to a remote server to store captured data into a Database, your could easily research current vulnerabilities that apply to that ...


1

I think the problem is the routes and protocol used. Try, to ping server use Packer equal the '0' in LAN, and internte ping: try hping use diffent flag: "-O --tcpoff Set fake tcp data offset. Normal data offset is tcphdrlen / 4." or "-2 --udp UDP mode, by default hping2 will send udp to target host's port 0. UDP header tunable options are ...


4

BurpSuite will not intercept server responses by default and display them to you. To enable this functionality go to: Proxy -> Options -> Intercept Server Responses And make sure to check the box next to Intercept responses based on the following rules Then either select one of the displayed rules or add one like the highlighted one below: Also make ...


1

If I understand the PTES correctly, OSINT occurs in the process first, including the element Internet Footprint, and finally Footprinting. This document correlates tools to those processes -- https://github.com/leebaird/discover/blob/master/notes/metasploit/Analysis%20of%20MSF%20Relative%20to%20PTES.pdf -- pages 5 to the mid-bottom of page 10 are OSINT, ...



Top 50 recent answers are included