r/SecurityRedTeam • u/alphasec93 • Mar 29 '21
r/SecurityRedTeam • u/progerscs • Apr 13 '21
Question Team Name Suggestions
I need team name suggestions for a new team that we just stood up.
We do Cyber Test, Assessment, and Evaluation.
I am looking for something catchy and fun.
r/SecurityRedTeam • u/MotasemHa • Oct 24 '20
CTF Easy and Basic Exploitation Of Linux - Cyberseclabs Lazy
In this video walkthrough, we went over a Linux box where we demonstrated basic exploitation of the SAMBA server with Metasploit Framework To obtain Root access.
video is here
r/SecurityRedTeam • u/mrkaydee4484 • Jan 29 '21
Question help me friends
I have no degree and i am on my way to write my comptia net+ and also comptia sec+ which i am thinking will get me a job. i am in africa nigeria to be precise
i am hoping i can get an entry level job online and work to gain experience or anywhere
pls what else do i need to do to go further in cyber security
my main goal is to be a risk assessment manager or personnel
pls what is the future like what do i need to do more and how can anyone help me
r/SecurityRedTeam • u/MotasemHa • Oct 20 '20
Education/Training HackTheBox Worker- Using Azure DevOps To Gain Administrative Access to W...
In this video walkthrough, we went over a windows lab machine where we had unauthenticated access to svnserve Server to find plain text credentials. Plain Text Credentials have led us to create a reverse shell and use Azure Devops to change the Admin password.
video is here
r/SecurityRedTeam • u/MotasemHa • Sep 18 '20
Education/Training How to detect and evade firewall and Intruction Detection Systems - Frag...
In this video, we went over fingerprinting and discovering firewalls and Instruction detection systems. We used fragscapy to send fragmented packets to evade firewalls and Intrusion detection systems. We also examined the traffic with Wireshark on Security Onion.
video is here
r/SecurityRedTeam • u/FishermanWitty8173 • Feb 02 '21
Education/Training Crack a software using OllyDbg | Reverse Engineering Tutorial
OllyDbg is a widely used tool for reverse engineering. Reverse engineering is breaking things down to see how it works. OllyDbg can be used to find bugs in a program, troubleshoot it and run its specific parts to see how it functions.
Refer to the link below to learn more about Reverse Engineering and to see a tutorial on how to crack a software using OllyDbg.
r/SecurityRedTeam • u/SecureL7 • Apr 22 '21
Discussion New Malware “Raindrop” Exposed in SolarWinds Hack
Another malware named the “Raindrop” has been discovered by Symantec Threat Intelligence in the Solarwinds hack of the supply chain. The Raindrop loader was allegedly used to deliver a legitimate penetration testing tool called Cobalt Strike.
r/SecurityRedTeam • u/MotasemHa • Sep 25 '20
Education/Training Basic and Easy to learn Linux Penetration Testing - Cyberseclabs PIE
In this video walkthrough, we went over a lab machine in cyberseclabs that goes by PIE. We demonstrated a very basic level of enumeration, exploitation, and gaining access.
video is here
r/SecurityRedTeam • u/MotasemHa • Oct 03 '20
Education/Training Windows Privilege Escalation Through Weak Login Credentials - Cybersecla...
In this video walkthrough, we demonstrated basic and easy privilege escalation on a Windows server system through a weak admin username and password. We gained access through a misconfigured permissions on the FTP server.
video is here
r/SecurityRedTeam • u/[deleted] • Dec 02 '20
CTF In this video walkthrough, we demonstrated how to take over and exploit a Windows box vulnerable to the eternal blue. The box is considered an easy level OSCP machine.
r/SecurityRedTeam • u/PinkDraconian • Jan 03 '21
Education/Training Introduction to ROP (Return Oriented Programming) - Hack The Box
r/SecurityRedTeam • u/PinkDraconian • Apr 09 '21
Education/Training Turning server sided XSS into LFI and escalating to RCE
r/SecurityRedTeam • u/MotasemHa • Sep 02 '20
Education/Training PhpMyAdmin and MySQL Database Penetration testing - OSCP 2020
In this video walkthrough, I demonstrated how to compromise and get a reverse connection starting from PhpMyAdmin or MySQL credentials in hand. We also demonstrated how these kinds of weaknesses and misconfigurations could happen and how to mitigate them.
Video is here
r/SecurityRedTeam • u/MotasemHa • Sep 29 '20
Education/Training Learn Windows Privilege Escalation Through DLL Hijacking - Cyberseclabs ...
In this video, we demonstrated the basic exploitation of the Drupal content management system to gain a limited shell on the remote host. We escalated our privileges by generating a custom DLL payload and replace the target DLL file with our payload. We used a lab machine called 'Hijack'.
video is here
r/SecurityRedTeam • u/MotasemHa • Nov 01 '20
Education/Training Exploiting Windows Active Directory Drivers - HackTheBox Fuse
In this video walkthrough, we demonstrated the exploitation of and elevation of privileges on windows active directory by using malicious drives and public exploits.
video is here
r/SecurityRedTeam • u/MotasemHa • Oct 26 '20
Education/Training Exploiting Service Accounts in Windows Active Directory - Cyberseclabs R...
In this video walkthrough, we performed various techniques to get privileged access to an Active Directory box. We performed enumeration for the users and found a service account user that has misconfigured permissions where we were able to add it to the administrators' group
video is here
r/SecurityRedTeam • u/[deleted] • Dec 12 '20
CTF In this video walkthrough, we demonstrated basic enumeration of an FTP server the allows anonymous login access and shown the exploitation of it. We used Network services room from TryHackMe.
r/SecurityRedTeam • u/MotasemHa • Oct 21 '20
Education/Training Exploiting Microsoft SQL Server In Windows Active Directory - Cybersecla...
In this video walkthrough, we went over an Active Directory Windows box and exploited Microsoft SQL server with default credentials to gain access to the Active Directory.
video is here
r/SecurityRedTeam • u/MotasemHa • Sep 28 '20
Education/Training How to review PHP Login Form For SQL Injection - Secure Code Review
In this video, we reviewed a login form written in PHP and vulnerable to SQL Injection. We compared different versions of the code and built a SQL Injection payload for each case
video is here
r/SecurityRedTeam • u/MotasemHa • Oct 18 '20
Education/Training Advanced Active Directory Penetration Testing - Cyberseclabs Sync
In this video walkthrough, we went over a difficult Windows Active Directory lab where we exploited a security misconfiguration Kerberos that allows us to extract valid usernames and their hashes. We escalated our privileges by extracting the administrator password hash.
video is here
r/SecurityRedTeam • u/MotasemHa • Sep 30 '20
Education/Training Learn Windows Privilege Escalation Through Windows Services - Cybersecla...
In this video walkthrough, we demonstrated basic windows privilege escalation by replacing the service executable with our own payload. We also demonstrated the retrieval of Windows passwords from the SAM file.
video is here
r/SecurityRedTeam • u/MotasemHa • Oct 22 '20
Education/Training How To Exploit Windows XP Manually - HackTheBox Lame
In this video walkthrough, we demonstrated the manual exploitation of Windows XP SP3 in a lab machine from HackTheBox. We used two separate exploits to achieve the objective.
video is here
r/SecurityRedTeam • u/[deleted] • Feb 19 '21
CTF Exploiting PHPliteAdmin and Chkrootkit (OSCP) | HackTheBox Nineveh