[Asdethprime]

EDIT

found one user ; starting with that. If you are an admin please close this

###################### Course #%

1) Taking a tour to the dark side of windows
2) A RAT to rule them all is .... PowerShell
3) Remote Control and Persistence through WMI and DCOM
4) Going deeper - using wmic.exe for recon
5) Moving laterally - psexec and PowerShell Remoting FTW
6) Privilege Escalation using JScript
7) Introduction to Exploit Development  - raw manipulation through C and COM API
########################################################################

[CyberStrike]

It sounds good, I thought about doing a network forensics course (I personally won't offer a course on attacking because someone can use it poorly) using join.me it allows for screen sharing and Kahoot.it for quizzes and including quick reference notes or cheatsheets. For number 5 I would include wmiexec, psexec is often flagged. Also you would want to cover pivots even if it's something simple as using windows firewall to send and receive traffic and using RDP for lateral movement. Perhaps touching on PTH (pass the hash) and privilege escalation, the thing is that students would need VMs of course Win7-10 and have some kind of target network even if it's simple as a Windows server being a DC and one windows 7 machine as a client.

[Asdethprime]

It sounds good, I thought about doing a network forensics course (I personally won't offer a course on attacking because someone can use it poorly) using join.me it allows for screen sharing and Kahoot.it for quizzes and including quick reference notes or cheatsheets. For number 5 I would include wmiexec, psexec is often flagged. Also you would want to cover pivots even if it's something simple as using windows firewall to send and receive traffic and using RDP for lateral movement. Perhaps touching on PTH (pass the hash) and privilege escalation, the thing is that students would need VMs of course Win7-10 and have some kind of target network even if it's simple as a Windows server being a DC and one windows 7 machine as a client.

Thank you for the input. I did not think about using RDP because I normally don't use it but that's something I can consider. Honestly you give me powershell access to the computer I am happy, don't need GUI.

wmic.exe and psexe.exe are windows core processes and actions on these are normally NOT FLAGGED by any antivirus. Even if they flag it, as these are system process there is no installation to be done for them to be able to block it. These are always already installed on Windows and antivirus can't do much against it. WMI ( Windows Management Instrument ) allows you to turn off one , OR ALL antivirus solutions.

[CyberStrike]

Thank you for the input. I did not think about using RDP because I normally don't use it but that's something I can consider. Honestly you give me powershell access to the computer I am happy, don't need GUI.

wmic.exe and psexe.exe are windows core processes and actions on these are normally NOT FLAGGED by any antivirus. Even if they flag it, as these are system process there is no installation to be done for them to be able to block it. These are always already installed on Windows and antivirus can't do much against it. WMI ( Windows Management Instrument ) allows you to turn off one , OR ALL antivirus solutions.

It's not so much about a GUI when dealing with RDP, let's say that a compromised user is part of an OU which one of the machines that this user can login to is Enterprise Admin, we can RDP into that machine. I remember Sophos for a while would flag psexec. End point protections (Sophos mainly) will flag wmiexec and psexec when used against DC's sometimes domain members.

[Asdethprime]

It's not so much about a GUI when dealing with RDP, let's say that a compromised user is part of an OU which one of the machines that this user can login to is Enterprise Admin, we can RDP into that machine. I remember Sophos for a while would flag psexec. End point protections (Sophos mainly) will flag wmiexec and psexec when used against DC's sometimes domain members.

Why RDP into it though. The only reason you would need Remote DESKTOP Protocol is when you need GUI right. WinRM [ Windows Remote Management ] and PowerShell remoting is lot easier and only requires you run 1 command to get all set up 'Enable-PSRemoting'.

With the same WinRM access I can get into the computer with Enterprise Admin, dump credentials from LSASS, and uses DCOM API to completely own that computer and any computer that I can reach.

[mmoore]

this looks great man if I was smarter I would love this:S just starting out and know nothing but goodluck bro

[Asdethprime]

this looks great man   if I was smarter I would love this:S just starting out and know nothing but goodluck bro

Ah no worries.

Thanks for the kind words though :)

[ende]

yo man im down, add me on discord.

[Asdethprime]

yo man im down, add me on discord.

Cool.

I haven’t set up the discord server ; give me some ideas on what would be a good place to teach you.

If it’s just you and me ; wanna do it through pM message on hackforums?

Also additionally , can u get a spare laptop / computer. It’s much easier with 2 computer once we start into controlling other PC.

But glad u are interested... let’s see how far we go.

[ende]

Cool.

I haven’t set up the discord server ; give me some ideas on what would be a good place to teach you.

If it’s just you and me ; wanna do it through pM message on hackforums?

Also additionally , can u get a spare laptop / computer. It’s much easier with 2 computer once we start into controlling other PC.

But glad u are interested... let’s see how far we go.

if you add me on discord we can talk in a call without a server, "This a robbery
#3536"
if you're experienced im down to put some money into it and invest in your idea. im new to the hacking world but im down to learn and experience

[Asdethprime]

if you add me on discord we can talk in a call without a server, "This a robbery
#3536"
if you're experienced im down to put some money into it and invest in your idea. im new to the hacking world but im down to learn and experience

Honestly I am NOT an expert hacker more intermediate ; that’s why I picked a topic I really know.

Discord I have to check ; don’t have experience teaching though.

Money I don’t really care, so don’t worry about that :)

[ende]

Honestly I am NOT an expert hacker more intermediate ; that’s why I picked a topic I really know.

Discord I have to check ; don’t have experience teaching though.

Money I don’t really care, so don’t worry about that :)

i used to do rats back in the day, i know how to get customers and bait for the rat i just dont know how to set it up. if you have any ideas im down to do whatever. whats your discord name, lets talk

[Asdethprime]

i used to do rats back in the day, i know how to get customers and bait for the rat i just dont know how to set it up. if you have any ideas im down to do whatever. whats your discord name, lets talk

Don’t have a discord account will create that shortly ( current getting home from work ), maybe tomorrow.

I won’t be using RATS at all , rather use powerful and wmic ; but bare with me soon u will realise this is vastly more powerful. Setting up is super easier you just type
‘Enable-PSRemoting’ and you are done.

We will talk soon don’t worry :)

[ende]

Don’t have a discord account will create that shortly ( current getting home from work ), maybe tomorrow.

I won’t be using RATS at all , rather use powerful and wmic ; but bare with me soon u will realise this is vastly more powerful. Setting up is super easier you just type
‘Enable-PSRemoting’ and you are done.

We will talk soon don’t worry :)

alright man, im down whenever you are. just give me the word

[Money-]

I am interested in learning this. I din't read the thread in a detailed way. I assume you are planning on a mentoring service for a fee? I am up for that if its possible.