2016

Bringing the hashes home with reGeorg & Empire

11 February 2016 ~3 min By sara
Empire Post-Exploitation Powershell
Is not a hack until you are 3 tunnels deep – Ian de Villiers External assessments. It’s about not only finding flaws but also looking at ways you can chain lower and medium-level vulnerabilities together, to be utterly devastating and gain full access. After situational awareness phase, pulling in all of my reconnaisance scans and input, I was left with typical results one might expect: missing patches here, little misconfiguration there, the typical…

Sensepost Maltego Toolkit: Skyper

11 January 2016 ~3 min By stuart
Fun Research Tools Maltego Skype Tool Transforms
Collecting and performing Open Source Intelligence (OSINT) campaigns from a wide array of public sources means ensuring your sources contain the most up to date information relating to your target. Skype, with over 300 million users, can be a vital source if used correctly. The above graphic shows over 70 million active members and over 500 million users that have registered!. As with all things online, many users leak sensitive information about themselves that those with the right skills, could harvest.