Metasploit is such a powerful tool that I can only scratch the surface of its capabilities here. As it has developed over the years, it is now possible to use Metasploit for nearly everything from recon to post exploitation to covering your tracks. Given its versatility, every aspiring hacker should have at least a tentative […]
Continue Reading
As you study SCADA/ICS hacking and security, it is useful to look back at some of the most successful SCADA/ICS attacks in history. In this way, you may gain some insight as to how future attacks may attempt to infiltrate your industrial control systems. Among the most famous and ingenious of these SCADA/ICS attacks became […]
Continue Reading
Introduction Buffer Overflows Buffer overflows are probably the most insidious type of attack. A buffer overflow is basically when a memory area is given too much data for the allotted space and the memory area overflows. This overflow can then enable the attacker to execute their own specially crafted code. The attacker’s code is often […]
Continue Reading
Welcome back, my novice hackers! My recent tutorials have been focused upon ways to NOT get caught. Some people call this anti-forensics—the ability to not leave evidence that can be tracked to you or your hack by the system administrator or law enforcement. One the most common ways that system admins are alerted to an […]
Continue Reading
Welcome back, my Metasploit aficianodos! In the previous part of this series, we looked at how to use Metasploit’s web delivery exploit to create a script to connect to a UNIX, Linux, or OS X machine using Python. Many members of the Hackers-Arise community have asked me, “Can we do the same for a Windows […]
Continue Reading
Automobile or car hacking is the leading edge of the hacking/penetration testing field. With the arrival of self-driving cars in the very near future, this field will only become even more important. For some background on this field, read my articles on the CAN protocol and the SocketCAN to better understand the technologies involved. As part of this rapid […]
Continue Reading
On September 12, 2017, FireEye revealed that they had found malware in the wild that exploited CVE-2017-8759. This malware exploits a vulnerability in the .NET Framework that enables the attacker to execute remote code on the target system (RCE). This is a big deal as remote code execution means that the attacker can run their […]
Continue Reading
Welcome back, my fledgling hackers! As we have progressed through this series on Metasploit Basics, we have used numerous techniques to exploit your target system including; 1. SMB Exploits (EternalBlue and MS08_067, for instance); 2. File Format (ms14-0440_sandworm, office_word_hta); 3. Browser Exploits (autopwn, Abobe Flash and numerous others); 4. Social Engineering Toolkit(SET); Custom Payloads with […]
Continue Reading
So many people have asked us for the Metasploit Kung-Fu course videos, we are now putting them on sale! If you just want to become proficient in the world’s most widely used pentesting framework or want to earn the prestigious Metasploit Certified Expert (MCE) certification (these videos covers all the areas on the exam), this […]
Continue Reading
Welcome back, my aspiring malware analysts! In my introductory tutorials on reverse engineering malware (Part 1-5) we introduced many new concepts. Now its time to put some of those concepts to work and begin analyzing some sample malware! In Part 1 of this series, I pointed out that there are two primary ways of analyzing […]
Continue Reading
This is the deal you’ve been waiting for!
During the month of February use code gold2025 to get 30% off the gold standard of cybersecurity training. keep that discount for as long as your subscription is active!
Now Only $69.00!
UNLOCK ACCESS TO OVER 40 RECORDED CLASSES AND MASTER OTW’S BESTSELLING CYBERSECURITY BOOKS
Click here to see everything included in your subscription.
Sec+ is the first step to becoming a cybersecurity professional and a job requirement for many roles.
Join Master OTW for an immersive, LIVE Bootcamp at just $249 (Free for Subscribers/Pro).
Hurry – only 20 guest spots available! Don’t miss your chance to pass your first certification.
