+- Sinisterly (https://sinister.li)
+-- Forum: General (https://sinister.li/Forum-General)
+--- Forum: The Lounge (https://sinister.li/Forum-The-Lounge)
+--- Thread: Using An Exploit (/Thread-Using-An-Exploit)
Using An Exploit - xdlwilliamz - 02-19-2020
How do i use an exploit in attacking victims, like when an exploit detects a vulnerability in a system and exploits it to gain control, what next ?
Does a loader or virus become needful for further exploitation ?
RE: Using An Exploit - mothered - 02-19-2020
It's not possible to answer your question based on general terms.
There's thousands of exploit attack vectors, and the same with security vulnerabilities.
RE: Using An Exploit - hacxx - 02-19-2020
My favorite type of exploits are web based exploits. I have tested exploit kits without any real scenario for years. The best i found was when Windows XP
release Service Pack 2.
I have also have seen a good one in a top site using Aardvark Topsites PHP. The user just needed to view the page and a optimized dropper drops, downloading a undetected trojan without memory leakage. Later the exploits kit start targeting Flash and Java and basically this was when exploit kits started hitting the mainstream media.
RE: Using An Exploit - sybylroot - 02-19-2020
first of all exploits and scanners are two different things, obviously you can implement and scanner into a exploit but it is not the idea, as a experience viral code i can tell that theres too many tipes of exploits, and each one have a "different way of the things", some "craft & hijack packages" others inject packages, others can do MITM attacks, some use NFC/Bluetooh vuln (like EternalBlue,EternalChampion,EternalRomance,etc) but they are too many types to be written in here, first research a little about small things before attemping to use a exploit, most are backdoored, be warned about it
RE: Using An Exploit - taylostolo - 02-20-2020
(02-19-2020, 01:25 AM)xdlwilliamz Wrote: How do i use an exploit in attacking victims, like when an exploit detects a vulnerability in a system and exploits it to gain control, what next ?i think i know what you are going for exploits are used to do certain things and are crafted like the program i just pushed on git hub to bypass uac in my case i have powershell scripts that exploit a known vulnerability and ether run a script or start a program to get admin rights like with my program you run it and for the windows 10 side it will give you an admin control panel or the 7 side that will ask you what exe you want to launch as admin they can also be used to force your way into a system eg metasploit and you dont really detect a vulnerability you get as much info as you can and use the info for a crated exploit and after you force your way in then its up to what you want to load personally i dont like dropping anything on the hard disk for some av resistance.
Does a loader or virus become needful for further exploitation ?
RE: Using An Exploit - xdlwilliamz - 02-22-2020
(02-19-2020, 09:08 PM)sybylroot Wrote: first of all exploits and scanners are two different things, obviously you can implement and scanner into a exploit but it is not the idea, as a experience viral code i can tell that theres too many tipes of exploits, and each one have a "different way of the things", some "craft & hijack packages" others inject packages, others can do MITM attacks, some use NFC/Bluetooh vuln (like EternalBlue,EternalChampion,EternalRomance,etc) but they are too many types to be written in here, first research a little about small things before attemping to use a exploit, most are backdoored, be warned about itOk thanks, i agree with you, it's a bit beyond my scope but i feel it's gonna make things easier if i got acquainted with 'em
RE: Using An Exploit - sybylroot - 02-24-2020
(02-22-2020, 05:21 PM)xdlwilliamz Wrote: Ok thanks, i agree with you, it's a bit beyond my scope but i feel it's gonna make things easier if i got acquainted with 'emYou welcome, you can ask me anytime if you have a question.
RE: Using An Exploit - xdlwilliamz - 02-24-2020
(02-24-2020, 10:26 PM)sybylroot Wrote:Lol are you sure about that? cos i ask too many questions 😅(02-22-2020, 05:21 PM)xdlwilliamz Wrote: Ok thanks, i agree with you, it's a bit beyond my scope but i feel it's gonna make things easier if i got acquainted with 'emYou welcome, you can ask me anytime if you have a question.
thanks anyway
RE: Using An Exploit - sybylroot - 02-26-2020
(02-24-2020, 11:05 PM)xdlwilliamz Wrote: Lol are you sure about that? cos i ask too many questions 😅
thanks anyway
Sure, whats the point of having knowledge if i can't share it? the more knowledge the better tech can improve even exploits dude
Most of my work (hope i will share something here soon if the admin is ok with that) is worth because is a well done work, not for shadowning or obscuring basic knowledge too some one that wants to learn, i know how it feels at the start but if you really like and put effort on it you will be writting good coding/tools/whatever stuff soon.
Remember power is knowledge, and knowledge is freedom.
RE: Using An Exploit - xdlwilliamz - 02-26-2020
(02-26-2020, 12:22 AM)sybylroot Wrote:oh ok, thanks man.(02-24-2020, 11:05 PM)xdlwilliamz Wrote: Lol are you sure about that? cos i ask too many questions 😅
thanks anyway
Sure, whats the point of having knowledge if i can't share it? the more knowledge the better tech can improve even exploits dude
Most of my work (hope i will share something here soon if the admin is ok with that) is worth because is a well done work, not for shadowning or obscuring basic knowledge too some one that wants to learn, i know how it feels at the start but if you really like and put effort on it you will be writting good coding/tools/whatever stuff soon.
Remember power is knowledge, and knowledge is freedom.
i intend to learn alot and i devote lotta time when possible, it's cool having ppl who wanna share all the know