- Видео 12
- Просмотров 15 447
redfire359
США
Добавлен 16 мар 2024
Malware Development, Penetration Testing, and general hacking guides.
OSCP Certified
OSCP Certified
Malware Persistence - Registry Keys
Today I went over how to programmatically add a registry key in C for malware persistence. Thanks for watching!
learn.microsoft.com/en-us/troubleshoot/windows-server/performance/windows-registry-advanced-users
andreafortuna.org//2017/07/06/malware-persistence-techniques/
DISCLAIMER -
The content of this video is for educational and informational purposes only. The techniques demonstrated are intended to promote understanding of cybersecurity and the importance of protective measures against malware threats. We do not endorse or promote any illegal activities, including the creation or distribution of malware.
Viewers are reminded that engaging in malicious activities is against the law and c...
learn.microsoft.com/en-us/troubleshoot/windows-server/performance/windows-registry-advanced-users
andreafortuna.org//2017/07/06/malware-persistence-techniques/
DISCLAIMER -
The content of this video is for educational and informational purposes only. The techniques demonstrated are intended to promote understanding of cybersecurity and the importance of protective measures against malware threats. We do not endorse or promote any illegal activities, including the creation or distribution of malware.
Viewers are reminded that engaging in malicious activities is against the law and c...
Просмотров: 139
Видео
Using SSH to create a reverse shell
Просмотров 1183 месяца назад
github.com/NHAS/reverse_ssh Thanks for watching !
Server hardening techniques with openVPN
Просмотров 803 месяца назад
Guide from OpenVPN: openvpn.net/community-resources/how-to/ DigitalOcean : m.do.co/c/a594d04a44d8 Thank you for watching
PGP walk through - Ha-natraj (auth.log poisoning)
Просмотров 1545 месяцев назад
Today we worked on the Ha-natraj box from PGP, which had an interesting foothold using auth.log poisoning.
OSCP prep - Machine walkthrough & avoiding rabbit holes and report taking techniques
Просмотров 4,1 тыс.5 месяцев назад
Bit of a longer video today, but I am going through the seppuku machine on PGP and walking through note taking techniques for an OSCP exam report. Thanks for watching!
Demo - Secure Chat Server in C++
Просмотров 315 месяцев назад
github.com/redfire359/SecureChatRoom I made a secure chat room encrypted with OpenSSL and a client/server connection.
AV's hate this ONE simple trick! Malware Obfuscation part #2 - avoiding Heuristic detection
Просмотров 4346 месяцев назад
A quick demo of how to avoid heuristic detection when developing malware from heavily signatures sources (eg. www.revshells.com/)
Linux Privilege Escalation - Tar wildcard injection
Просмотров 2226 месяцев назад
A quick video about how to exploit cronjobs that backup entire directories with wildcards. Thanks for watching!
Malware Obfuscation - Resource Files
Просмотров 576 месяцев назад
Thank you for watching. Resource File 1 VERSIONINFO FILEVERSION 3,8,5,4 PRODUCTVERSION 2,4,5,9 BEGIN BLOCK "StringFileInfo" BEGIN BLOCK "040904E4" BEGIN VALUE "CompanyName", "Tech Solutions Ltd.\0" VALUE "FileDescription", "Productivity Assistant\0" VALUE "FileVersion", "3.8.5.4\0" VALUE "InternalName", "ProductivityAssistant\0" VALUE "LegalCopyright", "Copyright © 2024 Tech Solutions Ltd.\0" V...
Pivoting through multiple subnets with Ligolo
Просмотров 2,1 тыс.7 месяцев назад
A quick tutorial on how to double pivot using ligolo Ligolo github page: github[.]com/nicocha30/ligolo-ng/releases Commands I used: Adding an interface: sudo ip tuntap add user *USERNAME* mode tun ligolo;sudo ip link set ligolo up Running the agent(s): ./agent.exe -connect IP:PORT -ignore-cert ./agent -connect IP:PORT -ignore-cert Adding a listener: listener_add addr 0.0.0.0:PORT to 127.0.0.1:P...
Yet another OSCP exam experience video
Просмотров 6 тыс.7 месяцев назад
My take on the OSCP exam and some tips I learned while studying PWK Syllabus: offsec.com/wp-content/uploads/2023/03/pen-200-pwk-syllabus.pdf PEN200 FAQs: help.offsec.com/hc/en-us/articles/12483872278932-PEN-200-FAQ ligolo: github.com/nicocha30/ligolo-ng OSCP report template: github.com/noraj/OSCP-Exam-Report-Template-Markdown/tree/master TJ Null's OSCP prep: docs.google.com/spreadsheets/u/0/d/1...
FunBoxEasy - Providing Grounds Play walk through
Просмотров 457 месяцев назад
Walk through of a boot to root machine on Offsec's PGP platform.
this is the reason why i dont rush and buy the exam first. its great to learn from the guys like you in the first place. first it doesn't look intimidating at all, second your points on rabbit hole will probably save me some decent hours :) again very much appreciated.
loved the video man. learning alot on rabbit holes
hello this isnt working for me on Dante Prolab, can you help? if you can, please drop your discord.
i am making notes of this, never given this exam but i wanna be ready of i do, which is ironic itself
Hey it's been exactly one year since you passed it. I am going to take the OSCP+ very soon. You all got this!
Hi Friend, can share your note any command list? Thanks
Doesn’t this require admin privileges
I'm confused. You said ligolo is good for the exam. But in your slide you wrote not for OSCP...
how can i use the srv command?
Its an alias I use to type faster the actual command is 'python3 -m http.server' www.tecmint.com/create-alias-in-linux/
26:13 what is the proof-of-concept section of the report for? Is it the PoC for exploit code? So in this case, that would be N/A?
Yes its for the code you use, and yeah if its not a program (i.e. manual exploitation) there's no code so you can put N/A. For code you get from github you can just include the link and maybe a code snippet if you had to modify something.
great job explaining the subject, only feedback I'd have is to increase your recording volume, keep up the good work :)
Fantastic walkthrough, thank you.
10x 4 ur vids, m8! <3
Nice.
Hi mate can yoy kindly share any good notes for the OSCP exam ! ? Thx in advance
The minute you put vim in I screamed. Great video though.
Congratulations ❤❤❤❤ You tried harder 💕
can you drop the cheatsheet ?
Isn't enum4linux prohibited on oscp?
If this is supposed to be "easy" and a actual OSCP machine would be "hard" then I'm giga F*d, this did not look easy at all and the rabbit holes would ruin me
Go for the low hanging fruit first..
Can you share your note man, please?
Thanks ❤ very well explained .
Hey bro, great contents. Did you pay for the 1 year plan or the 90 days one? I'm contemplating which plan to choose... I'm also thinking of getting PEN-300 OSEP after OSCP, so am thinking if the 1 year plan is worth it.
Nice explanation. Keep it up
Can you please upload the Obsidian file ?
Could you please share your notes? I liked how they were organized. It's okay to remove any OSCP copyright stuff
is ligolo-ng enough for oscp Or we need to know about other method of pivoting?
Its more than enough not sure if there’s double pivoting like this
@@mrwancool8648 could be on a new version mb
I have a question, I've made a lot of command alias and custom scripts to automate recon tasks, do I have to provide all my command alias and scripts code in the report? Would appreciate to get a reply
I mean the report require that someone else using it should be able to „root the box” doing all steps included. If you skip some parts that is not filling up the requirements and goal of the reporting part
sorry this is kinda late but yeah i'd add your alias file in the report. Personally I just didnt use aliases during the exam just to be safe
Thank you very much for making this video, bro. I'm currently doing retired HTB boxes to train for the OSCP exam. So far I've completed almost 50. How many PWK lab machines have you completed before taking the OSCP exam?
First of all congrats brother. Huge accomplishment and you should be very proud of yourself. Secondly, it may be asking too much but would you please consider sharing your obsidian file/subfile structure?
Very great content! I find this very helpful. Thanks for sharing
🔥 nice, i just did this box. Loved the commentary, i take my oscp this Friday
Good luck!
Did you pass?
Please make video on report writing
Thank you !!
Is this machine retired on PG? I can't find it. Subbed!
Yeup its still in the providing grounds play VM list, you could also get it here www.vulnhub.com/entry/seppuku-1,484/ Thanks for the sub!
Budddy... It's proving grounds! Good video, tho @redfire-359
Does the OSCP exam has this many rabbit holes as well? The challenge machines OSCP A B and C weren't that full of rabbit holes.
Depending on the exam you get, yes there could be a couple, I don't know exact numbers. And Offsec doesn't always put them in there intentionally but sometimes its just easy to get tunnel visioned on a port or service if its out of date, looks like it has an exploit available, etc.
the "hax" variable alone probably added a few detections
You definitely need to re-record this. I dont hear your audio at all.
Hello quy, It's possible to have Mentorship with you
Thank you for your really very nice video explanation I wanted to ask you, I was not so lucky to have a mentor, but I would like you to share your notes with me it could help me I thank you.
Terrible audio
Not really
on your side
Good info in here, thanks for the vid.
Wholeheartedly appreciate you saying li-'n'-golo. Thanks for the tutorial!
Congratulations! But your audio is very low, barely can hear it. Is it possible to record it again? I would love to hear your OSCP story
In the description what is the point or meaning of [.] for URLs?
RUclips channels that are less than 2 months old cant post URLs in their video descriptions for some reason. My channel is old enough now so I went back and updated them. But for some things like emails it's better to do [.] to counter bot scrapers. stackoverflow.com/questions/11563283/why-write-at-and-dot-in-email-rather-than-and
That was really helpful, thank you❤
Did not know about the proving grounds, thank you.