Posts

Showing posts with the label offensive

Powershell Empire : Swiss-Army Knife for Windows Post-Exploitation (Part 1).

Image
Powershell Empire is powershell based post-exploitation agent and has an ability to execute powershell agent without needing powershell.exe and consisting variety of modules that can be deployed on exploitable windows machine. As of this post, I will share about Empire 3 based on Empire ( refer here ) which has been migrated to Python 3.x which has been actively maintain by BC-Security .  General Installation Process for Powershell-Empire Setting up Empire is pretty straight forward and based on your liking and platform. In Kali or Debian based OS, you can install the latest version by executing the following command: sudo apt install powershell-empire If you intended to clone th e repository using Git, execute the following command: git clone  https://github.com/BC-SECURITY/Empire.git cd Empire sudo ./setup/install.sh I never try using docker to deploy Empire. But, if you prefer using a pre-built docker container, follow the following procedure: docker pull bcsecurity/empire:...

NMAP- My penetration Testing Guide and Notes

Nmap (Network Mapper) is used for network discovery and security auditing. Nmap can be used to determine whether the hosts are available on the network, listing services those hosts currently offering and their open ports, determine hosts operating system, filter or network protection are in use on the network. Nmap provides great functionality and features. Can be used to scan multiple targets or large network, mapping out networks and it is an open source software. Nmap interactions are on command line, but if you prefer to have a graphical user interface, you can use Zenmap which includes an advanced graphical user interface and results viewer. These notes written by me in my early day when I interested in infosec as my reference when pentesting or trying boxes. I simplified the command and what it do. I also provide this note part by part in my Basic Penetration Testing repository   starting from number 15 to 18 in my Github . Here I provide the link to the...