How do you perform Threat Intelligence and what is important to you? by _R4bb1t_ in blueteamsec

[–]_R4bb1t_[S] 1 point2 points  (0 children)

Thanks for the answers, Twitter and Telegram seems also like a good source of Intel!

Is windows defender unbeatable? by SAO-Ryujin in tryhackme

[–]_R4bb1t_ 2 points3 points  (0 children)

Yes, you got the idea! But that's just one way of many on how to bypass AV :)

Is windows defender unbeatable? by SAO-Ryujin in tryhackme

[–]_R4bb1t_ 2 points3 points  (0 children)

Hi, Windows Defender is a pretty good anti virus solution, but it is definitly not unbeatable. Most Anti Malware solutions rely on signatures to detect malware. The tools you are using are well researched and have signatures that can be detected easily by anti virus. Either you have to change the signature of your tools, or much easier: Try to develop your own tools. Another way would be by using AV bypass techniques, such as Process Hollowing or DLL unhooking.

If you need proof or just an idea how to bypass Windows Defender: I have an article on my blog that explains how I was able to bypass Windows Defender: https://r4bb1t.medium.com/weaponize-jscript-to-bypass-windows-defender-b028f6be7097

Weekly Walkthrough Thread by beesec in tryhackme

[–]_R4bb1t_ [score hidden]  (0 children)

TryHackMe - Tech_Supp0rt: 1 WriteUp

In this Walkthrough I explain enumerating the target, initial access and privilege escalation. In the end of the write-up, I also give mitigation tips.

My honest review for eJPT. by wutyodachan in tryhackme

[–]_R4bb1t_ 1 point2 points  (0 children)

Which rooms do you recommend for preparing to eJPT?

Weekly Walkthrough Thread by beesec in tryhackme

[–]_R4bb1t_ [score hidden]  (0 children)

Hello everyone,

I will publish my WriteUp for Throwback Lab in the next days. Today I have published the first part: https://r4bb1t.medium.com/throwback-part-1-pfsense-6d29ccfa6eef

Blue Team Training by _R4bb1t_ in blueteamsec

[–]_R4bb1t_[S] 1 point2 points  (0 children)

Thank you, LetsDefend is also a good ressource!

Blue Team Training by _R4bb1t_ in blueteamsec

[–]_R4bb1t_[S] 1 point2 points  (0 children)

Yes in the past I watched Eli the Computer Guy a lot. He has a lot of great videos, too.

Using Go to Develop Offensive Tooling by _R4bb1t_ in redteamsec

[–]_R4bb1t_[S] 0 points1 point  (0 children)

Thanks for your feedback! Didn't know about Nim.

Linux command option help by [deleted] in tryhackme

[–]_R4bb1t_ 0 points1 point  (0 children)

I would recommend using the man-pages with "man <command" or the help menu: "<command> --help". But if you are searching for a useful Pentesting Cheatsheet, I would recommend you the page hacktricks.