HackTheBox Academy

@HackTheBox_Academy @HackTheBox_Security

🔥 OS - Certified Web Expert Training Bundle #Course #Ethical_Hacking #PenTest ➖➖➖➖➖➖➖➖➖ 🌐 @HackTheBox_Academy 🌐 @HackTheBox_Security

@HackTheBox_Academy @HackTheBox_Security

🔥 OS - Certified Web Expert Training Bundle #Course #Ethical_Hacking #PenTest ➖➖➖➖➖➖➖➖➖ 🌐 @HackTheBox_Academy 🌐 @HackTheBox_Security

✡️ Become Root with CURL & Sudo #Linux #Privilege_Escalation #Tricks ➖➖➖➖➖➖➖➖➖ 🌐 @HackTheBox_Academy 🌐 @HackTheBox_Security

🎩 RdpStrike The Project Aims To Extract Clear Text Passwords From Mstsc.exe, When The ShellCode Injects Into The Mstsc.exe Process, It is Going To Put Hardware Breakpoint Onto Three Different APIs, Ultimately Capturing ALL Clear Text Credentials. 🔗 Source: https://github.com/0xEr3bus/RdpStrike

When The Aggressor Script Is Loaded On CobaltStrike, Three New Commands Will be Available:

1️⃣ rdpstrike_enable - Enables The HeartBeat Check Of New Mstsc.exe Processes And Injects Into Them.

2️⃣ rdpstrike_disable - Disables The HeartBeat Check Of New Mstsc.exe But Is Not Going To Remove The Hooks And Free The ShellCode.

3️⃣ rdpstrike_dump - Reads The File And Prints The Extracted Credentials.

#RDP #Stealler #bof #cobaltstrike ➖➖➖➖➖➖➖➖➖ 🌐 @HackTheBox_Academy 🌐 @HackTheBox_Security

🎩 RdpStrike The Project Aims To Extract Clear Text Passwords From Mstsc.exe, When The ShellCode Injects Into The Mstsc.exe Process, It is Going To Put Hardware Breakpoint Onto Three Different APIs, Ultimately Capturing ALL Clear Text Credentials. 🔗 Source: https://github.com/0xEr3bus/RdpStrike

When The Aggressor Script Is Loaded On CobaltStrike, Three New Commands Will be Available:

1️⃣ rdpstrike_enable - Enables The HeartBeat Check Of New Mstsc.exe Processes And Injects Into Them.

2️⃣ rdpstrike_disable - Disables The HeartBeat Check Of New Mstsc.exe But Is Not Going To Remove The Hooks And Free The ShellCode.

3️⃣ rdpstrike_dump - Reads The File And Prints The Extracted Credentials.

#RDP #Stealler #bof #cobaltstrike ➖➖➖➖➖➖➖➖➖ 🌐 @HackTheBox_Academy 🌐 @HackTheBox_Security

🎩 NetCat Commands 🥷 UseFul Tool To EveryOne. #Tools #Hacking #NetCat #Ethical #Linux #PenTest ➖➖➖➖➖➖➖➖➖ 🌐 @HackTheBox_Academy 🌐 @HackTheBox_Security

Top 6️⃣🅾️ Useful Commands That You NEED to Know In PenTesting. #Linux #Tools #PenTest #Tips ➖➖➖➖➖➖➖➖➖ 🌐 @HackTheBox_Academy 🌐 @HackTheBox_Security

💿 SSRF LocalHost Aliases ⭕http://localhost ⭕http://*.localhost ⭕http://127.1 ⭕http://127.0.0.0 ⭕http://127 0.0.1 ⭕http://0177.1 ⭕http://0x7f.1 ⭕http://127.000.000.1 ⭕http://[::1] ⭕http://[::] ⭕http://0 #BugBounty #Tips #SSRF ➖➖➖➖➖➖➖➖➖ 🌐 @HackTheBox_Academy 🌐 @HackTheBox_Security