x0341 x0341

Assembly Language / Reversing / Malware Analysis / Game Hacking -resources

	cmdkey /list \| ForEach-Object{if($_ -like "target=TERMSRV/"){cmdkey /del:($_ -replace " ","" -replace "Target:","")}}
	echo "Connecting to 192.168.1.100"
	$Server="192.168.1.100"
	$User="Administrator"
	$Password="AdminPassword"
	cmdkey /generic:TERMSRV/$Server /user:$User /pass:$Password
	mstsc /v:$Server

	Empire and Metasploit 101




	Goal: Use Empire and metasploit in example situation of network exploitation and post-exploitation host enumeration. We will exploit a network service on a Windows 7 VM, and then use our low-privilege shell to then execute an empire powershell stager, which will create an Empire agent on the local Windows 7 VM. After this, we will look through the various options available as an Empire agent.
	Following this, we will generate a DLL stager within Empire, and then use our existing meterpreter session on the Windows 7 VM to perform a DLL injection attack, to inject another Empire agent, directly into memory.

	Pre-Stuff: Empire is not just for windows. It has python based agents that can run on OS X and Linux. It's communication profile between agents and listeners is configurable, similar to CobaltStrikes. You can use pre-built or custom-made ones to employ such functionality. Empire is designed to stay off disk and in memory as much as possible. Empire does contain modules that will

	{
	"_id": "generic_theme",
	"name": "Rocket.Chat Theme",
	"description": "An overview of the theming JSON for Rocket.Chat.",
	"variables": {
	"main": {
	"error": "#CC243A",
	"error-light": "#A6303F",
	"alert": "#E8BE19",
	"alert-light": "#CEAB20",

	#!/bin/bash
	#
	# Author: Matt Green - @mgreen27
	# Description: script to download and build x64 and x86 Velociraptor local live response tool
	# 3rd party binaries embedded in output files
	# Linux requirements: wget, curl, zip
	# Tested: Velociraptor 0.3.7

	# latest Velociraptor release binary from github
	LINUX="$(curl -s https://api.github.com/repos/Velocidex/velociraptor/releases/latest \| grep browser_download_url \| cut -d '"' -f 4 \| grep linux-amd64)"