https://gkourgkoutas.net/en/tags/hacking/ Recent content in hacking on gkourgkoutas.net Hugo -- gohugo.io Mon, 16 Oct 2023 20:04:56 +0200 https://gkourgkoutas.net/en/posts/offensivegpt/ Mon, 16 Oct 2023 20:04:56 +0200 https://gkourgkoutas.net/en/posts/offensivegpt/ Recently I have been asked a lot about AI-related topics and what I think about them. Some time ago I wrote a blog post about chatGPT and it’s view on OT security (ChatGPT on Cyber Security). Of course, the hype around AI hasn’t stopped since then, and we still seem to be on the hype train, with new information flooding social media every week. My conclusion at that time was the following: https://gkourgkoutas.net/en/posts/redteam/ Sat, 17 Dec 2022 20:14:44 +0100 https://gkourgkoutas.net/en/posts/redteam/ What is a red team? A red team is a group of individuals who use their skills and expertise to challenge and test the effectiveness of an organization’s plans, processes, and systems. The term “red team” comes from the concept of “red teaming” which is a form of structured, independent analysis and evaluation that is designed to identify weaknesses and vulnerabilities in an organization’s plans, systems, and operations. Red teams are typically composed of experts in a variety of fields, including security, engineering, risk management, and operations. https://gkourgkoutas.net/en/posts/tiber/ Sat, 05 Nov 2022 20:07:22 +0100 https://gkourgkoutas.net/en/posts/tiber/ TIBER1 (Threat Intelligence-Based Ethical Red Teaming) is a framework to assess the cybersecurity resilience of financial institutions. TIBER tests are designed to simulate real-world cyber threats and attacks, and are intended to help financial institutions identify and address weaknesses in their cybersecurity posture. A quick how to Here are some general guidelines for how TIBER tests can be best executed: Identify the scope of the test: TIBER tests should be focused on a specific aspect of an organization’s cybersecurity posture, such as its network, applications, or processes. https://gkourgkoutas.net/en/posts/av-evasion/ Wed, 28 Jul 2021 10:10:16 +0200 https://gkourgkoutas.net/en/posts/av-evasion/ A lot of organizations and companies run antivirus software on their users clients. Users should be protected from themselves by preventing the execution of .exe files or scripts. Through GPOs and standard tools of the OS, this can be achieved. In this post we’ll be mainly talking about how to bypass tools like AMSI1 and Windows Defender. Antivirus Software The first AV software originated back in 1972. Since the first known Virus was the so called “Creeper Virus”2, Ray Tomlinson used to write the “Reaper”3, a program to remove it. https://gkourgkoutas.net/en/posts/oscp/ Sat, 01 May 2021 11:18:05 +0200 https://gkourgkoutas.net/en/posts/oscp/ There are tons of writeups on the internet from people who completed their OSCP certification, and I guess most of them are written better than this version. But anyway… Let’s jump in. Lab As soon as you get access to the lab, you will notice a lot of machines and different networks, which you can’t access at first. There is a so called learning path1, which suggests a few easy, medium and hard machines and their respective IP addresses. https://gkourgkoutas.net/en/posts/kerberoasting/ Thu, 11 Mar 2021 19:56:21 +0100 https://gkourgkoutas.net/en/posts/kerberoasting/ Definition: Kerberos Kerberos (/ˈkɜːrbərɒs/) is a computer-network authentication protocol that works on the basis of tickets to allow nodes communicating over a non-secure network to prove their identity to one another in a secure manner.1 There is also the MIT version of Kerberos, but it’s slightly different than the Microsoft2 implementation.3 Kerberos is also the three headed dog who guards the entrance to the underworld in greek mythology.4 https://gkourgkoutas.net/en/posts/passwords/ Fri, 06 Nov 2020 21:33:59 +0100 https://gkourgkoutas.net/en/posts/passwords/ It’s rather bad than complex A lot of users1 always choose their passwords based on the same criteria: They use the same password for every service password reuse They use a combination of username + year of birth user95 The classic par excellence: season + year Winter2020 With common password lists, these kind of passwords can be found out in seconds. Even if they’re hashed, cracking them with tools like Hashcat2 in combination with rule based lists3 and potent hardware is not a big effort. https://gkourgkoutas.net/en/posts/virus/ Sat, 17 Oct 2020 19:35:19 +0100 https://gkourgkoutas.net/en/posts/virus/ And I’m not talking about the Corona one here. Definition A computer virus is a type of malicious software program (“malware”) that, when executed, replicates itself by modifying other computer programs and inserting its own code. Infected computer programs can include as well, data files, or the “boot” sector of the hard drive. When this replication succeeds, the affected areas are then said to be “infected” with a computer virus. https://gkourgkoutas.net/en/posts/recon/ Fri, 19 Jun 2020 21:00:59 +0100 https://gkourgkoutas.net/en/posts/recon/ Footprinting Footprinting; often simply called recon (short for reconnaissance) is the uninteresting part for some people when it comes to attacking systems. Many want to start exploiting as soon as possible, if not looting or post exploitation. Well those parts are certainly the best if a target is compromised… BUT: The pre-attack phase is crucial for a successful attack. What is essential for good reconing? Much patience and above all thorough work!