Occupy The Web – Page 34

Metasploit Basics, Part 19: Web Delivery for Windows

December 2, 2023January 2, 2024Occupy The Web

Welcome back, my Metasploit aficianodos! In the previous part of this series, we looked at how to use Metasploit’s web delivery exploit to create a script to connect to a UNIX, Linux, or OS X machine using Python. Many members of the Hackers-Arise community have asked me, “Can we do the same for a Windows […]

Metasploit Basics, Part 17: Automobile Hacking with Metasploit

December 2, 2023January 1, 2024Occupy The Web

Automobile or car hacking is the leading edge of the hacking/penetration testing field. With the arrival of self-driving cars in the very near future, this field will only become even more important. For some background on this field, read my articles on the CAN protocol and the SocketCAN to better understand the technologies involved. As part of this rapid […]

How to Exploit Nearly Any Windows System Using CVE-2017-8759

December 2, 2023January 1, 2024Occupy The Web

On September 12, 2017, FireEye revealed that they had found malware in the wild that exploited CVE-2017-8759. This malware exploits a vulnerability in the .NET Framework that enables the attacker to execute remote code on the target system (RCE). This is a big deal as remote code execution means that the attacker can run their […]

Metasploit Basics, Part 15: Post- Exploitation Fun (Web Cam, Microphone, Passwords and more)

December 2, 2023January 1, 2024Occupy The Web

Welcome back, my fledgling hackers! As we have progressed through this series on Metasploit Basics, we have used numerous techniques to exploit your target system including; 1. SMB Exploits (EternalBlue and MS08_067, for instance); 2. File Format (ms14-0440_sandworm, office_word_hta); 3. Browser Exploits (autopwn, Abobe Flash and numerous others); 4. Social Engineering Toolkit(SET); Custom Payloads with […]

Metasploit Kung-Fu Videos Now For Sale!

December 2, 2023January 1, 2024Occupy The Web

So many people have asked us for the Metasploit Kung-Fu course videos, we are now putting them on sale! If you just want to become proficient in the world’s most widely used pentesting framework or want to earn the prestigious Metasploit Certified Expert (MCE) certification (these videos covers all the areas on the exam), this […]

Reverse Engineering Malware, Part 6: System Level or Behavioral Analysis

December 2, 2023January 1, 2024Occupy The Web

Welcome back, my aspiring malware analysts! In my introductory tutorials on reverse engineering malware (Part 1-5) we introduced many new concepts. Now its time to put some of those concepts to work and begin analyzing some sample malware! In Part 1 of this series, I pointed out that there are two primary ways of analyzing […]

Network Forensics, Part 2: Detecting and Analyzing a SCADA DoS Attack

December 2, 2023January 1, 2024Occupy The Web

Welcome back, my aspiring network forensic investigators! Now that you have a basic understanding of Wireshark and have conducted an analysis of a malware attack using Wireshark, let’s expand our purview of network attacks to that critical but often overlooked area of IT security, SCADA/ICS security. Unlike most attacks on IT security, attacks on SCADA/ICS […]

Network Forensics, Part 1

December 1, 2023December 1, 2023Occupy The Web

Welcome back, my hacker apprentices! Network forensics is key element of most digital forensics and incident response (DFIR) investigations. When our systems have been compromised by an attacker, its up the DFIR investigator to determine the who, what, where and how of the attack. In other words, what can a DFIR investigator learn about the […]

Web App Hacking, Part 10: Directory or Path Traversal

December 1, 2023December 1, 2023Occupy The Web

Welcome back, my novice hackers! In this series on Web App Hacking, we are examining multiple ways to hack web sites and web applications. In this particular tutorial we will examine directory or path traversal. In this type of attack, the hacker is able to get access files on the underlying server that might be […]

Metasploit Basics, Part 18: Marrying the Power of Shodan with Metasploit

December 1, 2023January 1, 2024Occupy The Web

Welcome back my rookie hackers! Every so often, I run across a new hacking tool that really gets me excited. Autosploit is one of those! Autosploit combines the power of two of my favorite tools, Shodan and Metasploit! AutoSploit uses Shodan to find specific targets based upon their banners and then Metasploit to automate the […]

Author: Occupy The Web

Metasploit Basics, Part 19: Web Delivery for Windows

Metasploit Basics, Part 17: Automobile Hacking with Metasploit

How to Exploit Nearly Any Windows System Using CVE-2017-8759

Metasploit Basics, Part 15: Post- Exploitation Fun (Web Cam, Microphone, Passwords and more)

Metasploit Kung-Fu Videos Now For Sale!

Reverse Engineering Malware, Part 6: System Level or Behavioral Analysis

Network Forensics, Part 2: Detecting and Analyzing a SCADA DoS Attack

Network Forensics, Part 1

Web App Hacking, Part 10: Directory or Path Traversal

Metasploit Basics, Part 18: Marrying the Power of Shodan with Metasploit

CYBER WEEK SALE

35% OFF EVERYTHING

USE CODE jjt8vpmput1d

ENDS 12/6 AT MIDNIGHT!

Excludes books, but everything else is fair game!