一蓑烟雨

摘要： Method1: Create a user by executing the following PowerShell Script. New-ADUser -name 'Michael Jordan' -SamAccountName jordan.michael -UserPrincipalNa 阅读全文

摘要： CLIENT SIDE ATTACKS Backdooring ANY file Combine backdoor with any file - Generic solution. Users are more likely to run a pdf, image or audio file th 阅读全文

摘要： CLIENT SIDE ATTACKS - Backdooring exe' s Download an executable file first. VEIL - FRAMEWORK A backdoor is a file that gives us full control over the 阅读全文

摘要： CLIENT SIDE ATTACKS - Social Engineering Social Engineering Information gathering Tool: Maltego Gathering Information About Target's Facebook Account, 阅读全文

摘要： CLIENT SIDE ATTACKS Social Engineering Gather info about the user(s). Build a strategy based on the info. Build a backdoor based on the info. 阅读全文

摘要： CLIENT SIDE ATTACKS Protecting against smart delivery methods Ensure you're not being MITM'ed -> use trusted networks, xarp. Only download from HTTPS 阅读全文

摘要： CLIENT SIDE ATTACKS Backdoor delivery method2 - backdooring exe downloads Backdoor any exe the target downloads. We need to be in the middle of the co 阅读全文

摘要： CLIENT SIDE ATTACKS Backdoor delivery method1 - Spoofing Software Updates Fake an update for an already installed program. Install the backdoor instea 阅读全文

摘要： CLIENT SIDE ATTACKS - Listening for connections 1. Run Metasploit Move the backdoor file to the webserver folder. And download it on the target machin 阅读全文

摘要： CLIENT SIDE ATTACKS Use if server-side attacks fail. If IP is probably useless. Require user interaction. Social engineering can be very useful. Infor 阅读全文