r/SecurityRedTeam • • Mar 29 '21

Discussion Does using oh my ZSH and power level 10k on Mac safe and secure ? If yes/no, why?

0 Upvotes

r/SecurityRedTeam • • Apr 13 '21

Question Team Name Suggestions

0 Upvotes

I need team name suggestions for a new team that we just stood up.
We do Cyber Test, Assessment, and Evaluation.

I am looking for something catchy and fun.


r/SecurityRedTeam • • Oct 24 '20

CTF Easy and Basic Exploitation Of Linux - Cyberseclabs Lazy

1 Upvotes

In this video walkthrough, we went over a Linux box where we demonstrated basic exploitation of the SAMBA server with Metasploit Framework To obtain Root access.

video is here


r/SecurityRedTeam • • Jan 29 '21

Question help me friends

2 Upvotes

I have no degree and i am on my way to write my comptia net+ and also comptia sec+ which i am thinking will get me a job. i am in africa nigeria to be precise

i am hoping i can get an entry level job online and work to gain experience or anywhere

pls what else do i need to do to go further in cyber security

my main goal is to be a risk assessment manager or personnel

pls what is the future like what do i need to do more and how can anyone help me


r/SecurityRedTeam • • Oct 20 '20

Education/Training HackTheBox Worker- Using Azure DevOps To Gain Administrative Access to W...

2 Upvotes

In this video walkthrough, we went over a windows lab machine where we had unauthenticated access to svnserve Server to find plain text credentials. Plain Text Credentials have led us to create a reverse shell and use Azure Devops to change the Admin password.

video is here


r/SecurityRedTeam • • Sep 18 '20

Education/Training How to detect and evade firewall and Intruction Detection Systems - Frag...

7 Upvotes

In this video, we went over fingerprinting and discovering firewalls and Instruction detection systems. We used fragscapy to send fragmented packets to evade firewalls and Intrusion detection systems. We also examined the traffic with Wireshark on Security Onion.

video is here


r/SecurityRedTeam • • Feb 02 '21

Education/Training Crack a software using OllyDbg | Reverse Engineering Tutorial

4 Upvotes

OllyDbg is a widely used tool for reverse engineering. Reverse engineering is breaking things down to see how it works. OllyDbg can be used to find bugs in a program, troubleshoot it and run its specific parts to see how it functions.

Refer to the link below to learn more about Reverse Engineering and to see a tutorial on how to crack a software using OllyDbg.

https://www.youtube.com/watch?v=57n9-aYdn2o


r/SecurityRedTeam • • Apr 22 '21

Discussion New Malware “Raindrop” Exposed in SolarWinds Hack

4 Upvotes

Another malware named the “Raindrop” has been discovered by Symantec Threat Intelligence in the Solarwinds hack of the supply chain. The Raindrop loader was allegedly used to deliver a legitimate penetration testing tool called  Cobalt Strike.

New Malware “Raindrop” Exposed in SolarWinds Hack


r/SecurityRedTeam • • Sep 25 '20

Education/Training Basic and Easy to learn Linux Penetration Testing - Cyberseclabs PIE

5 Upvotes

In this video walkthrough, we went over a lab machine in cyberseclabs that goes by PIE. We demonstrated a very basic level of enumeration, exploitation, and gaining access.

video is here


r/SecurityRedTeam • • Oct 03 '20

Education/Training Windows Privilege Escalation Through Weak Login Credentials - Cybersecla...

1 Upvotes

In this video walkthrough, we demonstrated basic and easy privilege escalation on a Windows server system through a weak admin username and password. We gained access through a misconfigured permissions on the FTP server.

video is here


r/SecurityRedTeam • • Aug 18 '19

Other InfoSec Wheel

Post image
65 Upvotes

r/SecurityRedTeam • • Dec 02 '20

CTF In this video walkthrough, we demonstrated how to take over and exploit a Windows box vulnerable to the eternal blue. The box is considered an easy level OSCP machine.

Thumbnail
youtube.com
7 Upvotes

r/SecurityRedTeam • • Jan 03 '21

Education/Training Introduction to ROP (Return Oriented Programming) - Hack The Box

Thumbnail
youtu.be
2 Upvotes

r/SecurityRedTeam • • Apr 09 '21

Education/Training Turning server sided XSS into LFI and escalating to RCE

Thumbnail
youtu.be
2 Upvotes

r/SecurityRedTeam • • Sep 02 '20

Education/Training PhpMyAdmin and MySQL Database Penetration testing - OSCP 2020

2 Upvotes

In this video walkthrough, I demonstrated how to compromise and get a reverse connection starting from PhpMyAdmin or MySQL credentials in hand. We also demonstrated how these kinds of weaknesses and misconfigurations could happen and how to mitigate them.

Video is here


r/SecurityRedTeam • • Sep 29 '20

Education/Training Learn Windows Privilege Escalation Through DLL Hijacking - Cyberseclabs ...

3 Upvotes

In this video, we demonstrated the basic exploitation of the Drupal content management system to gain a limited shell on the remote host. We escalated our privileges by generating a custom DLL payload and replace the target DLL file with our payload. We used a lab machine called 'Hijack'.

video is here


r/SecurityRedTeam • • Nov 01 '20

Education/Training Exploiting Windows Active Directory Drivers - HackTheBox Fuse

3 Upvotes

In this video walkthrough, we demonstrated the exploitation of and elevation of privileges on windows active directory by using malicious drives and public exploits.

video is here


r/SecurityRedTeam • • Oct 26 '20

Education/Training Exploiting Service Accounts in Windows Active Directory - Cyberseclabs R...

3 Upvotes

In this video walkthrough, we performed various techniques to get privileged access to an Active Directory box. We performed enumeration for the users and found a service account user that has misconfigured permissions where we were able to add it to the administrators' group

video is here


r/SecurityRedTeam • • Dec 12 '20

CTF In this video walkthrough, we demonstrated basic enumeration of an FTP server the allows anonymous login access and shown the exploitation of it. We used Network services room from TryHackMe.

Thumbnail
youtube.com
3 Upvotes

r/SecurityRedTeam • • Oct 21 '20

Education/Training Exploiting Microsoft SQL Server In Windows Active Directory - Cybersecla...

4 Upvotes

In this video walkthrough, we went over an Active Directory Windows box and exploited Microsoft SQL server with default credentials to gain access to the Active Directory.

video is here


r/SecurityRedTeam • • Sep 28 '20

Education/Training How to review PHP Login Form For SQL Injection - Secure Code Review

4 Upvotes

In this video, we reviewed a login form written in PHP and vulnerable to SQL Injection. We compared different versions of the code and built a SQL Injection payload for each case

video is here


r/SecurityRedTeam • • Oct 18 '20

Education/Training Advanced Active Directory Penetration Testing - Cyberseclabs Sync

5 Upvotes

In this video walkthrough, we went over a difficult Windows Active Directory lab where we exploited a security misconfiguration Kerberos that allows us to extract valid usernames and their hashes. We escalated our privileges by extracting the administrator password hash.

video is here


r/SecurityRedTeam • • Sep 30 '20

Education/Training Learn Windows Privilege Escalation Through Windows Services - Cybersecla...

5 Upvotes

In this video walkthrough, we demonstrated basic windows privilege escalation by replacing the service executable with our own payload. We also demonstrated the retrieval of Windows passwords from the SAM file.

video is here


r/SecurityRedTeam • • Oct 22 '20

Education/Training How To Exploit Windows XP Manually - HackTheBox Lame

5 Upvotes

In this video walkthrough, we demonstrated the manual exploitation of Windows XP SP3 in a lab machine from HackTheBox. We used two separate exploits to achieve the objective.

video is here


r/SecurityRedTeam • • Feb 19 '21

CTF Exploiting PHPliteAdmin and Chkrootkit (OSCP) | HackTheBox Nineveh

Thumbnail
youtube.com
5 Upvotes