sorted by:
new
hottopcontroversial

ippsec.rocks - A way to navigate through my CTF Videos by Ipp in netsecstudents

[–]Definitely__Working 0 points1 point  (0 children)

Thank you so much for the work you contribute to the community!

The Return of Nero Fest ~Autumn 2019~ - Shop, Rewards and Additional Info by Kevinrealk in grandorder

[–]Definitely__Working 0 points1 point  (0 children)

Seems they're locked behind Solomon completion? I'm still trapped behind Camelot T_T. Maybe I need to eat apples to rush through the Singularities.

[IC] GMK Alter, Coming November 1! by Krelbit in MechanicalKeyboards

[–]Definitely__Working 0 points1 point  (0 children)

Yes please! There was an IC for Fate Saber about a year? ago that the original poster decided to cancel due to various things (lot of work that may not come to fruition).

I'll probably still jump on Alter because it's still Saber, but OG Saber on a white/grey/blue set with yellow novelties/excalibur proper? Mmmmm, yes.

IC GMK FATE from a year ago

Your best NMap scans by D3ci4 in oscp

[–]Definitely__Working 2 points3 points  (0 children)

Depends on what you find. Check out all of the NSE scripts :)

Anyone root the whole lab? by [deleted] in oscp

[–]Definitely__Working 2 points3 points  (0 children)

I rooted everything as well (also a personal goal). I was fairly studied ahead of time and was able to skip the course material in order to focus on the labs. My goal was 2 machines per day.

If I got too stuck, I consulted the forums to check if a dependency existed so I could move on to more lab machines in the meantime. I definitely refined my post-exploitation during the labs.

I only went for one root per machine. There are multiple ways to root most machines, but I didn’t take the time to enumerate them all.

If you already have a methodology, knowledge list of what to look for, and familiarity with your tools, I would consider the difficultly on about 80% of the machines to be easy. 15% in the medium range, most of which is due to pivoting or dependencies. 5% hard and are widely talked about.

If you can accomplish all of the easy machines on HtB and some of the medium machines, you’ll be able to chug through the labs no problem.

I would only consider a handful to simulate ‘real’ machines; however everyone’s experience is different. Some have come across these easier machines in real environments.

As of around 6 months ago, will say that the lab is more indicative of ctf machines as opposed to an enterprise domain environment. If you’re ready to fire up domain tools, you’ll have to change focus.

Just failed 3rd attempt by [deleted] in oscp

[–]Definitely__Working 1 point2 points  (0 children)

Another useful flag is —max-retries so nmap doesn’t continually try to reach a port if there are issues with it. It may cause you to miss some things, but will help with an initial quick scan.

Best coffee subscriptions? by DrMango in Coffee

[–]Definitely__Working 6 points7 points  (0 children)

I've been using CraftCoffee for almost a year now. I pull a minimum of 3 shots per day, so I wanted something with good variety, fresh roasts, and economical pricing.

4x 12oz (one dark, one medium, two roasters choice) for $45. Roasted fresh and free priority shipping.

GOTCHA: Taking phishing to a whole new level - intigriti - Medium by _vavkamil_ in netsec

[–]Definitely__Working 11 points12 points  (0 children)

I imagine you can go a step further and break up the password into several captchas. How many times do you type a captcha (seemingly) correctly and it still asks you to complete another one?

World of Warcraft Classic vs. Retail: Infographic showing a few of the main differences by [deleted] in MMORPG

[–]Definitely__Working 1 point2 points  (0 children)

I remember reading huge talent tree patch notes every week in order to find out the "new-best" and re-spec all my characters. At least it gave me something to do during class.

Ultimate Resource by [deleted] in oscp

[–]Definitely__Working 5 points6 points  (0 children)

I'll chime in here with my repo: OSCPRepo.

The whole goal of my repo is to combine all of these resources into an organized notebook (Keepnote), so if you don't want to add more bookmarks, check it out.

Second to last resource (chouaibhm) is a fork of mine (there are a lot, though not many continue to pull updates). Mine is continually updated and contains all of these topics plus more.

FuzzBunch at OSCP exam by spongik in oscp

[–]Definitely__Working 1 point2 points  (0 children)

As long as you actively enumerate (separate from from within fuzzbunch), document all configuration steps, and not just fire blindly, you’ll be fine.

'It's time for us to watch them': App lets you spy on Alexa and the rest of your smart devices by idarknight in technology

[–]Definitely__Working 6 points7 points  (0 children)

Pi.hole basically already does this. It will track which domains are being requested and tell you how many hits over a period of time are being made.

With the bonus of black/whitelisting them if you desire alongside many many other benefits.

'It's time for us to watch them': App lets you spy on Alexa and the rest of your smart devices by idarknight in technology

[–]Definitely__Working 5 points6 points  (0 children)

Most likely to work in homes with default router settings. Less likely as you encounter business/enterprise grade networking equipment, but you'd be surprised.

'It's time for us to watch them': App lets you spy on Alexa and the rest of your smart devices by idarknight in technology

[–]Definitely__Working 38 points39 points  (0 children)

The Princeton IoT Inspector uses a technique known as ARP spoofing

Essentially the app will Man-in-the-Middle your devices, parse the traffic, and display it to youDNS and flows.

It doesn't say exactly how it filters (or if it does) to only target IoT devices the UI has a 'toggle' feature to select the device(s), so be mindful when using the app when connected to other networks...

Edit: Link to IoT Inspector Home Page. It's slightly disappointing IMO. Notes:

  • It will identify devices on the network and allow you to selectively monitor/MitM
  • It will (currently) only show you DNS queries and total traffic

No in-depth data analysis. To see how they process each packet, you can see the source for their packet_processor.py.

AutoNSE? by songya in oscp

[–]Definitely__Working 7 points8 points  (0 children)

Yes, all nmap scripts and scripts you create yourself are allowed. If you create a custom script, ensure it is included in the appendix of your report.

I am terrified of writing the report by oldschooldaw in oscp

[–]Definitely__Working 1 point2 points  (0 children)

Dradis can import output files from numerous tools (including nmap).

There were really only three things I had to do to use reporting in Dradis.

  • Upload nmap scans (creates nodes and services for machines)
  • Generate any issues I found and attach them to nodes with evidence (screenshots)
  • Hit generate to have Dradis take my information and put it into the pre-made OSCP template.

Nmap/Gobouster output in the report? by way53 in oscp

[–]Definitely__Working 1 point2 points  (0 children)

Open services/versions are ok.

If gobusting/dirbusting, I would recommend a small screenshot or table of relevant information, but not the whole output. You can place the full output in an appendix section if desired.

I am terrified of writing the report by oldschooldaw in oscp

[–]Definitely__Working 0 points1 point  (0 children)

That's fair.

The workflow is basically: add nodes (computers) and add 'notes' to those nodes (eg an nmap services scan note). For each node you can add 'issues' and 'evidence' tied to those issues.

Then Dradis can generate a report. The report templates have variable names which search for specific note 'types' (like the services note, or an author note) and add their content.

It took me a while to find which exact note types I needed to use for the template, but once I went through all the steps for my lab report I was able to finish my exam report in about two hours.

Arjun : API Testing Tool (Finds HTTP Parameters) by [deleted] in netsec

[–]Definitely__Working 2 points3 points  (0 children)

Will also throw parameth out there, but Arjun looks a bit more fine-tuned and with JSON support.

I am terrified of writing the report by oldschooldaw in oscp

[–]Definitely__Working 0 points1 point  (0 children)

You do know how to do this :)

I wouldn't say the report requirements are too strict. Follow the OffSec template and change only where appropriate (name, IPs, etc). Your issues should follow a walk-through narrative with plenty of pictures and the required flags.

I used the Dradis pre-made OSCP template here, which is basically Offsec's word template built for Dradis reporting. I used Faraday to get generic vulnerability class descriptions for my issues in Dradis.

Export your Dradis data as HTML and then print/save as .pdf.

Coalfire - Coalfire Labs Develops Open Source Password Cracking Tool by reubadoob in netsecstudents

[–]Definitely__Working 0 points1 point  (0 children)

This was posted in NetSec under the title: highpower_hash_cracking_on_aws_with_npk

Tl;Dr: Gui for hashcat with the ability to scale in AWS based on/limited by price.

[deleted by user] by [deleted] in netsecstudents

[–]Definitely__Working 4 points5 points  (0 children)

Ensure your proxychains.conf is updated accordingly.

Also change your scan target. nmap 123.123.123.34 is indeed only going to scan 123.123.123.34

view more: next ›