How Hackers Use netsh.exe For Persistence & Code Execution (Sliver C2)

Поделиться
HTML-код
  • Опубликовано: 11 сен 2024

Комментарии • 65

  • @RaverDK
    @RaverDK Год назад +29

    Haa played around with netsh after seeing that same Tweet... 🤓😆
    And as much as i love these short bit videos i miss the old +1H videos where you just went mental on some project - Watching people fail and rethinking their approach often learns more than anything else.
    But again, thanks for the videos John! Keep up the great work, hope you are having fun on the journey!

  • @HJvanWaegeningh
    @HJvanWaegeningh Год назад +37

    "Because it is over 9000." LOL

  • @stevetheborg
    @stevetheborg Год назад +1

    when i was a kid i didnt have internet service. i did have a modem. i got an AOL disk in the mail. used aol to download boserve and got to chatting. then found a local chat room and commenced to making a list of local internet provider passwords. I would like to thank my classmates for never getting on the internet. (90's)

  • @ReligionAndMaterialismDebunked
    @ReligionAndMaterialismDebunked Год назад +1

    Early crew! I love the shirt btw! I saw Jurassic Park in the theatres as a 90s kid, born in 89. :3 Hehe. Dinosaur 🦖🦕. 🐁

  • @aadhiseshandc7260
    @aadhiseshandc7260 Год назад +3

    Hi john! love ur vids!

  • @squid13579
    @squid13579 Год назад +1

    John your computer Specs ?
    Superb video 🔥.

  • @Chris-zc9bp
    @Chris-zc9bp Год назад

    Great video. I've been at this for a min, and I learn lots from all you videos. Thanks for the great content!

  • @SamsonPavlov
    @SamsonPavlov Год назад +2

    Super cool and exciting video! Thank you for sharing! ❤️

  • @seiv-
    @seiv- Год назад +1

    Hi John, just a question. What is the difference of this sliver C2 from metasploit and why not to use msf for those demos ? Cobalt Strike is different because the client is windows based but for those Linux based C2 clients I really do not see the difference 😢 in fact, it sometimes looks harder to do stuff on those rather than msf

    • @architvats2633
      @architvats2633 11 месяцев назад

      I have the exact same opinion. Had a look at Mythic and Havoc C2 as well which felt more exploitation C2 as compared to Covenant C2 which seemed more like post-exploitation focused. Please correct me if I'm wrong.

  • @mukto2004
    @mukto2004 Год назад +1

    does netsh start automtically when windows starts? thats why it is a persistence ?

  • @-GenDrive
    @-GenDrive Год назад +3

    Nice work. Thanks from Germany...

  • @jamiekomodo1751
    @jamiekomodo1751 Год назад

    Non-technical question (or maybe that is a technical question, after all), how are you zooming in on your screen? I take it, the reason you installed via curl (instead of kali repoisitories), is to make sure you had the most recent code?

  • @kireyn
    @kireyn Год назад

    More Sliver? Sure, more Sliver in the name of Bishop Fox!)

  • @evasionette
    @evasionette Год назад +1

    nice and early, another good video ^^

  • @FriedMonkey362
    @FriedMonkey362 2 месяца назад

    ITS OVER 9000!

  • @walterkovacs61
    @walterkovacs61 Год назад +1

    amazing, gotta try this at work

  • @asdfasddfs5484
    @asdfasddfs5484 Год назад

    Nice Tee John

  • @lordjafar8528
    @lordjafar8528 Год назад

    Ur the man..that was so cool...pentesting is more than i could imagine

  • @cot3chcot3ch96
    @cot3chcot3ch96 Год назад

    nice job john love you always prof and vocal

  • @CU.SpaceCowboy
    @CU.SpaceCowboy 9 месяцев назад

    golang is awesome because its really easy to statically compile a single binary on any system. victim doesnt need additional stuff already installed like c# sometimes does.

    • @The_One_0_0
      @The_One_0_0 8 месяцев назад

      You could say the same for c and rust now two golang is just the child but I agree it is okay for cross compatibility much more easier then using c but both can be the same

  • @adamhorsky9826
    @adamhorsky9826 Год назад +2

    Not only hackers :) feds too

  • @SatoshiSky
    @SatoshiSky 4 месяца назад

    Could you have used something like Shellter to inject this shell code into netsh.exe or a DLL for the binary? - also it looks like you're able to generate the payload in the shellcode format now so you don't have to use the nim script to convert it. Maybe this was added in an update to sliver

  • @designzonebeats
    @designzonebeats 5 месяцев назад

    I love being "required" to watch hacking videos for work, at work.

  • @RoomTwentyNine
    @RoomTwentyNine Год назад +1

    How many virtual machine you have John ? 😅

  • @telekors5730
    @telekors5730 Год назад

    I wonder if you leverage changeling to swap your shell code out on the fly

  • @iconic_vide0s
    @iconic_vide0s 10 месяцев назад

    Really Great BRO!

  • @BrutusMaximusAurelius
    @BrutusMaximusAurelius Год назад +2

    11:41 yeah that’s what I though haha. Because MDE immediately blocks this haha.

  • @sok_leaphacker
    @sok_leaphacker Год назад

    Really good

  • @HarvestHaven09
    @HarvestHaven09 Год назад

    Hi mister perfect 🎉

  • @liudvikasstankus
    @liudvikasstankus Год назад

    super cool

  • @DDBAA24
    @DDBAA24 Год назад +1

    Interesting, I've only ever used this with physical access to get wifi passwords. Cewl stuff.

  • @hanko498
    @hanko498 Год назад

    What type of VPN do you use?

  • @hiddengo3232
    @hiddengo3232 Год назад

    Plz make more video like this

  • @bilaalmuhammad-ql1li
    @bilaalmuhammad-ql1li 11 месяцев назад

    how we can get can you help??? pls!!!!

  • @stevetheborg
    @stevetheborg Год назад

    who remembers Back orifice ?

  • @the-real-random-person
    @the-real-random-person Год назад

    damn thx for this great content!

  • @user-mv1zf1zu2q
    @user-mv1zf1zu2q Год назад

    this app its not on market but l tried to find it so l wanted to share it with you

  • @brunoenricobignotti5448
    @brunoenricobignotti5448 Год назад

    Have you noticed you're very lookalike to the guy from LowLevelLearning? Am I crazy?

  • @DrewRossHenry
    @DrewRossHenry 7 месяцев назад

    Why "apt install sliver" when you can curl pipe to bash like a an absolute maniac!

  • @cybersec9345
    @cybersec9345 Год назад

    Awsome

  • @livestreamvi7991
    @livestreamvi7991 4 месяца назад

    Sir thank you for the binnim tool thank you so much❤❤❤😢

  • @dhanrajbharadwaj3891
    @dhanrajbharadwaj3891 Год назад

    Video To hack scammers .... Process video...... How scammers playback channel hack in the scammers system

  • @PraveenXVlogs
    @PraveenXVlogs Год назад

    दुनिया की सबसे बड़ी योद्धा मां होती है।🧑‍🍼
    कौन कौन मानता है इस बात को
    Love U Maa😘😘🥰

  • @lfcbpro
    @lfcbpro Год назад

    This one is just too deep for me, within the first 4 mins there was so many different acronyms and phrases I just had no clue what was going on.
    Shame, I used to like John's channel, but it is just assuming the average viewer knows so much these days.
    I am sure for the knowledgeable it is very interesting, but they already know this stuff, so who is the target audience?
    Does anyone have any recommendations for some lower level content?

    • @_JohnHammond
      @_JohnHammond  Год назад +1

      What is the sort of content and approachability you would rather see?

    • @pabloalfaro2595
      @pabloalfaro2595 8 месяцев назад

      its crazy that you talk about how hard it was for the 'average viewer' to watch and when asked what he can do to improve, you stay silent.

  • @0x1h
    @0x1h Год назад

    🤨

  • @LilPozzer
    @LilPozzer Год назад

    im the first!!!!

  • @asynciome6737
    @asynciome6737 10 месяцев назад

    If you don’t know what he’s saying then don’t watch it stop complaining we need more advanced videos bruh

  • @Udjsieid
    @Udjsieid Год назад +1

    Bro hit the gym also

  • @stephanrogers8947
    @stephanrogers8947 Год назад

    NO idea what's going on here. John's gotten worse. Next video he'll be programming his own AI in python and saying how easy it was....

  • @alexleungnet
    @alexleungnet Год назад

    Anyone know how to resolve this:
    ┌──(root㉿kali)-[/opt/binnim]
    └─# nimble build --verbose
    Verifying dependencies for binnim@0.1.0
    Error: Unsatisfied dependency: nim (>= 1.6.14)
    ┌──(root㉿kali)-[/opt/binnim]
    └─# apt-get upgrade nim
    Reading package lists... Done
    Building dependency tree... Done
    Reading state information... Done
    nim is already the newest version (1.6.10-2).
    Calculating upgrade... Done
    The following packages were automatically installed and are no longer required:
    python3-ajpy python3-pysmi python3-pysnmp4
    Use 'apt autoremove' to remove them.
    0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

  • @dhanrajbharadwaj3891
    @dhanrajbharadwaj3891 Год назад

    How scammers hack there system RUclips: scammerplayback

  • @DDBAA24
    @DDBAA24 Год назад

    1:08 , oldie but goodie ,, real friends dont let friends pipe bash 🤌