+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Legion | Official Hacking HelpDesk (/showthread.php?tid=3922225)
Legion | Official Hacking HelpDesk - Acroz - Dec 11, 2013
[img]http://i.minus.com/ieq6viOQ6szdE.gif[/img]
Legion | Beginner HelpDesk
Good day, sirs.
This thread is the Official HelpDesk Thread of the group Legion.
In order for your questions to be answered, simply post them on this thread and a member of the group will post their response to it once they see it; several members can answer the same question, if they feel like something was missing in the first answer, so make sure to check back to the thread for the answer.
Consider subscribing to the thread - button in upper right corner of this post - so you'll get notified when new posts are made.
Note: The old thread started by 'Rogue' is now INACTIVE. Please refer to this thread for help!
Regards,
Legion
* - phreaker - Dec 11, 2013
We are here for all beginners who need help getting started! 🎉
* - Cha0 - Dec 11, 2013
That's absolutely right, I'll do my best to help out as well. 🤝
Glad we decided a new help desk thread had to be made.
* - XxXDarkHunterXxX232 - Dec 11, 2013
How to evade heuristic IDSes using self changing Shell Code?
How to escalate privs on a *nix box without Race Conditioning or IFS?
How to evade ASLR without bruteforcing and ret2reg?
Thanks.
* - LevelUp - Dec 11, 2013
(Dec 11, 2013 03:03 PM)XxXDarkHunterXxX232 Wrote: How to evade heuristic IDSes using self changing Shell Code?
How to escalate privs on a *nix box without Race Conditioning or IFS?
How to evade ASLR without bruteforcing and ret2reg?
Thanks.
1. Get pass IDS signature check with unicode conversion, compression/decompression of instr and loading of SC, instr reversal, XORing vals etc
2. Try SES or LD_PRELOAD
3. Pointer leaking
* - XxXDarkHunterXxX232 - Dec 11, 2013
(Dec 11, 2013 03:14 PM)LevelUp Wrote: 1. Get pass IDS signature check with unicode conversion, compression/decompression of instr and loading of SC, instr reversal, XORing vals etc
2. Try SES or LD_PRELOAD
3. Pointer leaking
Alright, thanks. I'll have go do some research on the LD_Preload method.
* - Acroz - Dec 11, 2013
(Dec 11, 2013 03:21 PM)XxXDarkHunterXxX232 Wrote: Alright, thanks. I'll have go do some research on the LD_Preload method.
If you need any help, please don't be afraid to ask :)
* - XxXDarkHunterXxX232 - Dec 11, 2013
(Dec 11, 2013 03:14 PM)LevelUp Wrote: 1. Get pass IDS signature check with unicode conversion, compression/decompression of instr and loading of SC, instr reversal, XORing vals etc
2. Try SES or LD_PRELOAD
3. Pointer leaking
I seriously cannot find anything regarding SES or LD_PRELOAD. Any idea's as to where I can read up on this?
Thanks LevelUp.
* - hamzaisgay - Dec 11, 2013
ok, hopefully i get some answers ;d.
1. can dictionary attacks crack a forum username? or is it bruteforce?
2.can you provide me with a dictionary or brute force list?
* - Acroz - Dec 11, 2013
(Dec 11, 2013 07:01 PM)hamzaisgay Wrote: ok, hopefully i get some answers ;d.
1. can dictionary attacks crack a forum username? or is it bruteforce?
2.can you provide me with a dictionary or brute force list?
1. Yes
2. Sure, I'll send you a link in just a few minutes :)
* - Ρain - Dec 11, 2013
If I install .NET 4 on, will it be able to process all the ones before?
If my ports are not normally forwardable, can Metasploit still listen to/for reverse TCP payloads and such?
* - daveyman123 - Dec 11, 2013
What is the best way for a single person beginner to start spreading my rat?👹
* - Acroz - Dec 11, 2013
(Dec 11, 2013 09:47 PM)daveyman123 Wrote: What is the best way for a single person beginner to start spreading my rat?👹
Torrent spreading! Bind your FUD RAT to a popular torrent and spread it via torrent sites.
Alternatively, you could spread via omegle and other chat sites. If you need help, feel free to PM me ;)
* - _Silky - Dec 11, 2013
(Dec 11, 2013 09:39 PM)G0dOf4ll Wrote: If I install .NET 4 on, will it be able to process all the ones before?
I'm not sure what you mean by this, but all the features prior to 4, should process on 4 if that's what you're asking.
(Dec 11, 2013 09:39 PM)G0dOf4ll Wrote: If my ports are not normally forwardable, can Metasploit still listen to/for reverse TCP payloads and such?
On your LAN, yes. But you won't be able to do external attacks without forwarding the ports.
* - Ρain - Dec 11, 2013
(Dec 11, 2013 11:27 PM)_Silky Wrote: I'm not sure what you mean by this, but all the features prior to 4, should process on 4 if that's what you're asking.
On your LAN, yes. But you won't be able to do external attacks without forwarding the ports.
Any ways you know for a Linux computer to open ports? The biggest issue that no one can resolves is that I use my phone's mobile hotspot, it is an Android, unrooted, but can easily be rooted with Odin.