ICMP Shell Fun
Every now and then you will be onsite and find a locked down environment and no outbound internet access or DNS from the client systems, but the client systems can ping outbound to the internet. I haven’t up until now needed to do much with ICMP on jobs, as normally there are other ways out. But on a recent internal job […]
AV0id – Anti-Virus Bypass Metasploit Payload Generator Script
Introducing a simple script I have created to bypass most Anti-Virus products. This script is based on scripts I used whilst attempted to avoid A.V, credit to all authors of the mentioned scripts below for their research and work. This was just a very quick script I put together to make life a bit easier. […]
Ipad Extra Screen
Whilst working onsite today I was rather jealous of a colleague who had a nice fold flat USB external LCD for his laptop. It is always tricky when onsite and have multiple windows open or reading/writing reports etc so this looked like a great idea. I thought I will order one of those, then I remembered I […]
LazyMap – Lazy Nmap Scanning Script
Introducing LazyMap, a new script I have been working on. What does it do? It is simply a bash script that automates the NMAP tool to assist with internal network scans. Why use it? For anyone who has worked in a cold data centre will appreciate that running NMAP over many VLANs with cold hands […]
Unquoted Service Paths
I have been playing with unquoted service paths/trusted paths the last few days and thought would write something up. Credit to Gavin Jones who introduced me to this issue, which to be honest I hadn’t heard of before and I normally only checked cacls and permissions of services. What is the issue? Basically it is related to the path […]