[sh4moon]

With powershell being caught more and more commonly now even with obfuscation methods, what are your recommendations on making payloads that are less likely to be caught for red team engagements?

just because powershell is detected more than it was doesn't mean it isn't a factor. you could use veil evasion or make your own custom payloads/payload templates.

[๖ۣۜCriminal]

just because powershell is detected more than it was doesn't mean it isn't a factor. you could use veil evasion or make your own custom payloads/payload templates.

Powershells just another living off the land technique, it's been heavily replaced by abusing the binaries that come with java there was one you can pass code to and various other ones. The most advanced malware combines pre and post exploitation into one as iv'e seen malware that basically just launchs shit like powershell or some other LOTL technique and either downloads and passes in commands from a txt file or it's built into the malware it self.

[sh4moon]

Powershells just another living off the land technique, it's been heavily replaced by abusing the binaries that come with java there was one you can pass code to and various other ones. The most advanced malware combines pre and post exploitation into one as iv'e seen malware that basically just launchs shit like powershell or some other LOTL technique and either downloads and passes in commands from a txt file or it's built into the malware it self.

I agree. my opinion is that you should use what's already on system when possible. there was a backdoor technique that used a combo of a .bat, powershell, and something else. I'll have to see if I can find it.

[SysAdmin]

Bumping this up a bit, we're still taking in questions!

[Legion]

Where's the best place for me to freshen up on website exploitation? Preferably a reading source?

[SysAdmin]

Where's the best place for me to freshen up on website exploitation? Preferably a reading source?

http://www.valencynetworks.com/articles/...ation.html

There's also places like Cybrary and Udemy (warez disallowed) that have courses on Web Exploitation.

[Legion]

http://www.valencynetworks.com/articles/...ation.html

There's also places like Cybrary and Udemy (warez disallowed) (warez disallowed) that have courses on Web Exploitation.

Thanks man I'll take a look. I didn't know cybrary specifically did web exploitation. I've done the security+ course they offer.

[SysAdmin]

Thanks man I'll take a look. I didn't know cybrary specifically did web exploitation. I've done the security+ course they offer.

Getting the All-In-One Security+ Book from Amazon would also help, I have the Network+ one and it goes very in-depth.

I imagine Security+ would be the same as it is from the same publisher and writer.

[passwords]

Packet Manipulation
I recently developed my own proxy server.
So far I've only tested in on Terraria, where I can receive and send the packets from the client.

My question is.. What are the limits for packet manipulation?
What games can you do it with, without having to crack some serious encryption?
Also, what more is there to do besides game packet manipulation?

[sh4moon]

Packet Manipulation
I recently developed my own proxy server.
So far I've only tested in on Terraria, where I can receive and send the packets from the client.

My question is.. What are the limits for packet manipulation?
What games can you do it with, without having to crack some serious encryption?
Also, what more is there to do besides game packet manipulation?

you could use it to bypass firewall restrictions. this is a bit of a side note because it's not really packet manipulation. you could put it on a hacked system and use the system as a proxy.

[๖ۣۜCriminal]

Packet Manipulation
I recently developed my own proxy server.
So far I've only tested in on Terraria, where I can receive and send the packets from the client.

My question is.. What are the limits for packet manipulation?
What games can you do it with, without having to crack some serious encryption?
Also, what more is there to do besides game packet manipulation?

every single game is vulnerable to it, even encrypted ones you just have to know how to hook packet sends before the encryption occurs, thats usually how people do it, all games by design suffer from packet manipulation, other then packet manipulation you can't really do much in an online game, theres client side code injection which sometimes can also lead into packet manipulation but usually it's just for stuff like ESP and etc some of the more major server side exploits usually stem from packet manipulation.

[HFuserLvl9001]

I figure this is a decent place to ask. Lets say theoretically someone wanted to evaluate the security of some websites/systems. How can they best maintain their anonymity? I read the guide suggestion and it provides some good information, but I didn't see anything about VPS', or utilizing proxychains or the tor service. When going active, whats the best way forward?

[sh4moon]

I figure this is a decent place to ask. Lets say theoretically someone wanted to evaluate the security of some websites/systems. How can they best maintain their anonymity? I read the guide suggestion and it provides some good information, but I didn't see anything about VPS', or utilizing proxychains or the tor service. When going active, whats the best way forward?

if by moving forward you mean actually breaking into stuff...
I'd use a Kali usb for your os, and never actually install it on your computer's hard drive. use a Wi-Fi network other than yours. use a vpn which is really important if you use public Wi-Fi. buy yourself a nice bulletproof server and install hacking tools on that (we'll call it device B). then compromise a server or some system and use that as a proxy (device C).
so how it'll work is you head to your coffee shop and connect to the Wi-Fi. you use your vpn and tor (with the proxychains tool) to connect to server B with all your tools on it (probably using ssh to control the server). from server B you conduct your hacking through device C as your proxy.
if you want to be less black/grey hat then cut out device C. if you want more anonymity then just add a lot more device C's. or if you don't want to bother with device B then just use tor and vpn.

[Armada]

Packet Manipulation
I recently developed my own proxy server.
So far I've only tested in on Terraria, where I can receive and send the packets from the client.

My question is.. What are the limits for packet manipulation?
What games can you do it with, without having to crack some serious encryption?
Also, what more is there to do besides game packet manipulation?

Packet manipulation is extremely effive in phishing, network breaches, application manipulation (games, etc) and much more.

Consider the following. Packets are the networks form of communication right?
When you manipulate packets, you are basically playing the game Broken telephone.
The idea is the end packet will not be the same as the originally sent packet, allowing the MITM attack to basically manipulate the communication stream to tell the systems to do whatever the hell the attacker wants it to do. (Within limitations of course)

[HFuserLvl9001]

if by moving forward you mean actually breaking into stuff...
I'd use a Kali usb for your os, and never actually install it on your computer's hard drive. use a Wi-Fi network other than yours. use a vpn which is really important if you use  public Wi-Fi. buy yourself a nice bulletproof server and install hacking tools on that (we'll call it device B). then compromise a server or some system and use that as a proxy (device C).
so how it'll work is you head to your coffee shop and connect to the Wi-Fi. you use your vpn and tor (with the proxychains tool) to connect to server B with all your tools on it (probably using ssh to control the server). from server B you conduct your hacking through device C as your proxy.
if you want to be less black/grey hat then cut out device C. if you want more anonymity then just add a lot more device C's. or if you don't want to bother with device B then just use tor and vpn.

I would never break into anything without authorization, but thanks for the info. It's always good to learn something new.