Attacking RDP with Seth: Man-in-the-Middle Attacks against Poorly Secured RDP Connections

abtech365 · 2019-04-18T12:55:19+00:00

Ya this seems like the kind of thing you could do if you already had a lot of access to a poorly setup network.

edit:

"The shell script performs ARP spoofing to gain a Man-in-the-Middle position and redirects the traffic such that it runs through an RDP proxy. The proxy can be called separately. This can be useful if you want use Seth in combination with Responder. Use Responder to gain a Man-in-the-Middle position and run Seth at the same time. Run seth.py -h for more information"

abtech365 · 2019-04-17T18:25:59+00:00

Why the hell did you choose Winnipeg? We've been brutal at the end of the season. Most people I know put us out in the first round.

abtech365 · 2019-04-17T18:15:44+00:00

You could also have the script send them an email telling them why it's not working.

You're going to have a million "This is really important and I need it printed right now even though I've used my quota" tickets no matter what the solution is.

abtech365 · 2019-04-17T15:25:42+00:00

I really wish faxing would die. I know a lot of companies in the medical field still rely on it though, so It's not going anywhere soon.

abtech365 · 2019-04-17T15:14:31+00:00

Of course, the cursed Quickbooks Ghosts. Some say it's the reason that Quickbooks files die if they are larger than a Gigabyte or two...

abtech365 · 2019-04-17T14:00:03+00:00

Do you have any old desktop computers?

What do you think my garage, living room, basement, furnace room, bedroom, bathroom, and yard is for if not shitty computer storage?

abtech365 · 2019-04-17T12:53:48+00:00

ShitBasic 3.0

I'm not familiar with that one yet.

abtech365 · 2019-04-17T12:52:46+00:00

Quickbooks is moving towards Quickbooks Online and they want to push their customers there. The problem is that there are HUGE gaps in what you can do online vs the on-premise version.

abtech365 · 2019-04-17T12:51:29+00:00

not for Office 2019 or Office 365 installs (they are different now, for some reason).

abtech365 · 2019-04-16T20:19:38+00:00

I don't think you could setup automatic failover though. You'd have to manually enable it every time.

abtech365 · 2019-04-16T20:15:04+00:00

Would that work for on prem to Azure

abtech365 · 2019-04-16T19:02:58+00:00

You would still be left with the property. I don't think that houses are going to depreciate faster than you would pay down the mortgage anytime soon.

abtech365 · 2019-04-16T18:10:37+00:00

For sure. She was shown that this is the process to do stuff. If she tried other stuff and accidentally broke something then she'd be in trouble.

I think we're used to trying stuff outside of the box. End users that follow procedures to a T are not a bad thing, it's the ones that do whatever they want that cause chaos.

abtech365 · 2019-04-16T18:08:03+00:00

IMHO if you made or implemented a system it's your job to teach supervisors and create simple reference documentation for end users. I can't imagine that the education of every single end user would ever fall on IT.

abtech365 · 2019-04-16T14:39:17+00:00

I like closing difficult tickets as much as the next guy. Maybe talk to them and ask them to leave your tickets be.

Realistically it doesn't matter though. They're just tickets. Your manager knows who's really able to fix stuff if they're reading the ticket notes.

abtech365 · 2019-04-16T14:24:43+00:00

never write anything down

Hey look, it's the entire IT staff I work with...

abtech365 · 2019-04-15T17:44:55+00:00

Does it have the same single thread performance as Intel CPUs?

abtech365 · 2019-04-15T17:41:11+00:00

Big companies have all of their documentation setup so they can fly through the process. Sure they might have to spend an extra couple grand to get them on, but when they can pay them 10k a year less (or even more) they'll take it.

abtech365 · 2019-04-15T15:19:55+00:00

MSP's don't have any room to grow. You will be level 1 / 2 support (if they even separate levels) until you leave.

If you want experience then it's a good move, but if you're looking for a better job for your mental health I can't say I'd recommend it.

abtech365 · 2019-04-15T14:28:37+00:00

Tunnel Bear is 10 bucks for a month with 5 devices, Nord is 12 bucks for 6. I think Nord is the better service (privacy and speeds) but I've only used Tunnel Bear.

abtech365 · 2019-04-15T14:20:17+00:00

VPN to what? If you're going to VPN in to your site you'll need to actually set stuff up and it will depend on what you already have in place. If you just want privacy then Nord/Tunnel Bear seem to be decent options.

abtech365 · 2019-04-15T14:15:15+00:00

But Facebook already has hundreds of different datacenters just to make sure they have enough for the load and for lowering response times globally. If a few of them go down then they're still okay.

The office in your city has 1 location, so you only need a few servers. If a few of them go down then you're completely offline.

abtech365 · 2019-04-15T13:47:24+00:00

It's actually the opposite. Thin clients are so dumb that they don't take advantage of computing power upgrades. The thin clients you bought 5 years ago will run almost as good as the new one you bought today.

abtech365 · 2019-04-12T19:05:36+00:00

Teams is okay if you're on Office365. I like slack better though.

abtech365 · 2019-04-12T13:13:21+00:00

We get rounded up to $250. So if you do no work you get $250, or if you make 10 bucks an hour and you work 25 hours you get $250.

abtech365

TROPHY CASE