social media
Once you gain access to a system during pentest, you might want to retain access by means of a backdoor. The most trivial method is to use metsvc which ‘unfortunately’ is very well fingerprinted by anti-virus software. In this post, let us look at how to use a backdoor that
social media
The best place to exchange a secret is amongst a crowd - unknown. With the amount of traffic generated by social networks, what if you could camouflage the pentest drop box traffic? Pentest drop box - a portable device that is plugged (or connected wirelessly) to the target network during
social media
Question - In a controlled corporate environment with DLP solutions monitoring the HTTP and Email traffic, how would you perform data exfiltration during a Red Team Pentest ? ‘One’ of the answers would be to use social networking sites, let’s look at Facebook in this post. Data exfiltration using Facebook