The DMZ

A serious place where infosec is discussed PS we don't do hard...
Jul 18, 2016 21:26
Thank you, let me dig it a bit deeper, brb ;)
Jul 18, 2016 21:26
Could you please pass me a link to the course you are talking about please :)
Jul 18, 2016 21:25
*to a course you want me to look into
Jul 18, 2016 21:24
pass me a link
Jul 18, 2016 21:23
nothing on Youtube or a book
Jul 18, 2016 21:22
I watched most on PluralSight, but there was very little on safe/passive/undetectable/lowRisk exploitation which is really am after
Jul 18, 2016 21:21
yes - that's what I am really after
Jul 18, 2016 21:19
lol
Jul 18, 2016 21:19
Jul 18, 2016 21:18
is there any source to learn about exploiting a file share and is updated as well
Jul 18, 2016 21:16
what sort of information can we get from a machine that is taken out of network and is offline now, other then hashes
Jul 18, 2016 21:15
lol - you are right
Jul 18, 2016 21:15
@RoryAlsop using wireshark, i believe it's detectable
Jul 18, 2016 21:14
@RоryMcCune what are chances to get detected
Jul 18, 2016 21:12
@RоryMcCune i believe so.. as there was a profile created on that machine with domain admin like an year ago. I believe hashes on a machine gets updated automatically even if admin won't log in for a long time
Jul 18, 2016 21:11
there is a domain admin hash - we harvested using mimikatz, but not sure where to go forward with it
Jul 18, 2016 21:10
In this scenario, we only own a single machine with local admin account
Jul 18, 2016 21:09
yes
Jul 18, 2016 21:09
not getting caught ?
Jul 18, 2016 21:09
@RoryAlsop I think I am trying to find safest way to compromise a workstation
Jul 18, 2016 21:07
there must be some passive way, i heard stories about people getting access to 1 machine in LAN & easily then exploiting whole network,
but what if network is watched -- tools like mimikatz won't help
Jul 18, 2016 21:03
@RоryMcCune mimikatz and tools a like are very active... I want to learn about something very passive
Jul 18, 2016 21:02
saying that u have access to there server
Jul 18, 2016 21:02
if someone logs into a server from there workstation, is there anything can be done to get control of there workstation ?
Jul 18, 2016 21:00
why is it not considered as a threat
Jul 18, 2016 21:00
why everyone talks about www hackng but little abut LAN hacking ?
Jul 18, 2016 20:59
hi
Jun 5, 2016 11:14
brb
Jun 5, 2016 07:27
@RoryAlsop is pass the hash really passive way of doing stuff ?
Jun 4, 2016 07:10
if someone in domain get's domain admin ntlm hash, then can he access any machine's C drive in it's network
Jun 4, 2016 07:08
hi
Jun 3, 2016 15:59
@RoryAlsop I meant LAN :)
 

 Root Access

For all you Super Users out there. You have backups, right?
Jun 4, 2016 16:23
this seems fun
Jun 4, 2016 07:08
hi ya
Jun 3, 2016 16:12
@allquixotic cuz there friend told me, he is jealous of my website
Jun 3, 2016 16:11
I think they are using TOR
Jun 3, 2016 16:11
they live in same town as me, but google analytic point in different country
Jun 3, 2016 16:11
@allquixotic I know someone who had been attacking adsense on my website
Jun 3, 2016 16:03
@Bob how people get away with it then :)
Jun 3, 2016 16:00
is Tor really anonymous ?
Jun 2, 2016 20:57
i want to use gpu for cracking
Jun 2, 2016 20:56
what if pass isn't in rainbw tble
Jun 2, 2016 20:53
how long it will take ? 69 years :P
Jun 2, 2016 20:52
i already have admin permissions to machine
Jun 2, 2016 20:52
i want to get it, otherwise i can use control panel to reset it
Jun 2, 2016 20:50
@BenN thats resetting, not getting :)
Jun 2, 2016 20:50
@RahulBasu whats that
Jun 2, 2016 20:43
password is not as important as experiencing cracking it