← Older posts
Newer posts →

Teensy – KeyboardLockKeys

Published August 25, 2011 | By phillips321

So i was lucky enough to be given a teensy 2.0 with a microSD reader by David (ReL1L) Kennedy whilst i was at B-Sides Vegas. Lucky me!

After a quick chat with Dave he mentioned that the teensy was a “send to PC” only device. This got me thinking. If it’s possible for a normal keyboard to read the state of the Caps, Scroll and Num locks from the… Continue reading →

Posted in Uncategorized | Tagged , , , , | 4 Comments

Metasploit’s msfvenon command line utility

Published July 7, 2011 | By phillips321

So unfortunately I have not had the time lately to keep up to date with the changes going on with metasploit but one thing that caught my eye was the msfvenom binary in the root of the framework3 directory. Neat name, but what is it? A little googling found me this blog post by bannedit. He goes on to mention that msfvenon simply combines the functionality of both msfpayload… Continue reading →

Posted in metasploit | Tagged , , , , , | 1 Comment

Meterpreter’s new reverse_http and reverse_https options

Published July 7, 2011 | By phillips321

So we’ve all been unlucky enough to have a meterpreter session die on us, and then we’ve all been unlucky enough that we cannot re-exploit the box using the same vulnerability for some reason or another.

No one I know in the White Hat scene likes to use any form of persistence with a payload; and you’d be nuts to use the bind_tcp option through fear of leaving it running.… Continue reading →

Posted in metasploit | Tagged , , , | 6 Comments

OpenWiFi w/ splash screen using DD-WRT

Published June 29, 2011 | By phillips321

So we’ve all been lucky enough to have free wifi from time to time. Sometimes coffee shops offer free access. Recently in Tallinn, Estonia nearly everywhere I went I had access to free wifi. It got me thinking, all this free wifi and should I trust any of it? I knew how easy it was to set up an open wireless access point named “FreeWiFi”, but what if I wanted… Continue reading →

Posted in Uncategorized | Tagged , , , | 7 Comments

Better domains for social engineering

Published June 28, 2011 | By phillips321

The other day i had to perform some brief and remote social engineering tasks. (1 day and telephone only)

I was attempting to trick a target into downloading a malicious executable by calling up, pretending to be BT (British Telecom) and then requesting that the user downloads a Speed Test in order for me to perform some “diagnostics”.

I provided the link to the customer as btsupport.com.phillips321.co.uk, unfortunately the phillips321.co.uk… Continue reading →

Posted in Uncategorized | Tagged , , , , , | 2 Comments
← Older posts
Newer posts →

Please feel free to share my content but always link back here :-)