Ncat Reverse Shell (Shell Shovelling)
This will probably be my last Ncat post for now as I really must get on with other things. If you want a comprehensive Ncat tutorial then hop over to IronGeek. Ncat really is a superb tool. Previous...
View ArticleCreating a persistent Ncap backdoor in Windows XP startup using Metasploit
I couldn’t figure out how to do this in Armitage and so had to resort to the good ol’ Terminal. I exploited the XP system as per this post and obtained an Meterpreter shell. First to upload the...
View ArticleSeting up a simple backdoor shell using Ncat via Metasploit Armitage
First I exploited my Windows system with Metasploit Armitage obtaining a Meterpreter shell as per this post. Then I needed to upload the ncat.exe file (which I download from here) to the target...
View ArticleMetasploit: My First Successful Armitage Exploit
I just completed my first successful exploit in the marvellous Metasploit GUI Armitage. Details of the target machine on my Virtual Hacking Lab: Windows XP Pro Service Pack 2 (unpatched). Firewall and...
View ArticleDetecting Metasploit Armitage attacks in Security Onion Via a Dualcomm...
Back from holiday and managed to get my hands on an excellent cheap Dell laptop and a Dualcomm Network tap. I loaded the full Security Onion suite (Xubuntu 12.04 64-bit) on the Dell laptop and rigged...
View ArticleDetecting Nmap ARP Scan (-PR) in Wireshark
This is the first in a series of posts looking at detecting Nmap scans in Wireshark. I’m being guided by Chapter 31 of Wireshark Network Analysis entitled: “Detect Scanning and Discovery processes“....
View ArticleLearning Nmap Security Network Port Scanner: Remote Operating System...
This is the eighteenth post detailing my notes on Nmap Network Scanning. Although the inner working of OS detection are complex, it’s very easy to use.and the results very comprehensive. Here is scan...
View ArticleMetasploit: My first use of Auxiliary Modules
Chapter nine of Metasploit: The Penetration Tester’s Guide moves into auxiliary modules. Here’s a snippet from the book: In addition to providing valuable tools such as port scanners and service...
View ArticleLearning Nmap Security Network Port Scanner: Service and Application Version...
This is the sixteenth post detailing my notes on Nmap Network Scanning. Following on from the last Nmap post on service and application version detection, Nmap considers rarity and probes of high...
View ArticleMetasploit Meterpreter: MS11-006 Client-Side Malicious Document Exploit –...
I’m following instruction given in Metasploit: The Penetration Tester’s Guide - Chapter 8 (Exploitation Using Client-Side Attacks). Details of the target machine on my Virtual Hacking Lab: Windows XP...
View ArticleMetasploit Meterpreter: Internet Explorer “Aurora” Memory Corruption...
I’m following instruction given in Metasploit: The Penetration Tester’s Guide - Chapter 8 (Exploitation Using Client-Side Attacks). Details of the target machine on my Virtual Hacking Lab: Windows XP...
View ArticleMetasploit: Experimenting with Immunity Debugger, NOP’s, Opcode, Assembly...
I’m following instruction given in Metasploit: The Penetration Tester’s Guide - Chapter 8 (Exploitation Using Client-Side Attacks). It’s worth watching this excellent video which demonstrates the...
View ArticleMetasploit Meterpreter Railgun: Post Exploit Windows API Manipulation
Metasploit: The Penetration Tester’s Guide has this to say about Railgun: You can interface with the Windows native API directly through a Metasploit add-on called Railgun. [....] Railgun gives you the...
View ArticleMetasploit: Listing Meterpreter Post Exploitation Modules
This follows on from a previous post within which a target machine was exploited and a Meterpreter shell obtained. Details of the exploited machine are: Windows XP Pro Service Pack 2 (unpatched)....
View ArticleLearning Nmap Security Network Port Scanner: TCP FIN, NULL and Xmas Tree Scans
This is the ninth post detailing my notes on Nmap Network Scanning. The TCP FIN, NULL and Xmas Tree Scans exploit a loophole in TCP RFC: The TCP RFC says that if a closed port receives a packet that...
View ArticleMetasploit Meterpreter: Killing Antivirus Software on Exploited System – Killav
This follows on from a previous post within which a target machine was exploited and a Meterpreter shell obtained. Details of the exploited machine are: Windows XP Pro Service Pack 2 (unpatched)....
View ArticleMetasploit Meterpreter: Migrate a process and obtain system password hashes
This follows on from a previous post within which a target machine was exploited and a Meterpreter shell obtained. Details of the exploited machine are: Windows XP Pro Service Pack 2 (unpatched)....
View ArticleMetasploit Meterpreter: Creating a persistent backdoor connection
This follows on from a previous post within which a target machine was exploited and a Meterpreter shell obtained. Details of the exploited machine are: Windows XP Pro Service Pack 2 (unpatched)....
View ArticleMetasploit Meterpreter: Sniffing traffic on exploited system – Packetrecorder
This follows on from a previous post within which a target machine was exploited and a Meterpreter shell obtained. Details of the exploited machine are: Windows XP Pro Service Pack 2 (unpatched)....
View ArticleMetasploit Meterpreter: Run VNC
This follows on from a previous post within which a target machine was exploited and a Meterpreter shell obtained. Details of the exploited machine are: Windows XP Pro Service Pack 2 (unpatched)....
View Article