Recent content on Cybersecurity & DFIR: An Adversarial Simulation Perspective
Analysis apktool was used to extract package contents to CTF3-0.Extracted/ for manual inspection. “CaptureThis!” was compiled for Android SDK version 14, and includes an external library libfragment.so . A basic text search strings *.* | grep '_CTF' was conducted in the extracted contents directory to check for a statically-defined flag, yielding no results. Upon attempting to load the…
Disclaimer : This content is for educational and authorized security testing in controlled environments only. Do not use any techniques described here against systems you do not own or lack explicit permission to test. Unauthorized use is strictly prohibited. Introduction Scenario: You’re tasked with performing an ad-hoc phishing engagement by your CISO, for a client with over 1,000+…
Gaining initial access to a network is an amazing feat, and the resulting flood of catecholamines contributing to the euphoria of your new-found access is easily dampened before the finish line if you make the slightest of mistakes – therefore, let’s not be a n00b and use Meterpreter . Please don’t. Unless your goal is to alert the SoC . To begin, we will need a place to store…
Insanely simple. I wonder if this method is used in APT groups ? 🤔 Typical corporate environments operate in Microsoft’s ecosystem, utilizing Outlook as their primary mail client. What you may have been unaware of , as I was, is that Outlook can be controlled via PowerShell with the use of COM Objects . Let’s take advantage of this feature and “puppeteer” Outlook –…
Wow, I can’t believe this still works, but it does. One of the biggest let-downs during any engagement, is getting your C2 implant blocked by AV/EDR . All the OSINT , Social Engineering , and research has gone out the window, and the Security Operations Center (SoC) is lit up. 😡 I’m talking Carbon Black or SentinelOne , etc. Windows Defender pretends to secure your computer, but with…
You’ve identified your target’s e-mail address, and have done proper social engineering to set the context & expectation the target will receive a file. What do we send if we know very little about the target ? It’s typical in a business scenario to sign non-disclosure agreements, so we will use that as the “lure”. Fire up metasploit !? Nahh. That’s for script…