jetlib.sec » Tags » passive-network

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

2 items tagged "passive network"

Related tags: windows [+], read [+], order [+], open ports [+], networkminer [+], network sniffer [+], network [+], meterpreter [+], memory [+], forensics [+], exploitation activities [+], david kerb [+], colin ames [+]

• September 20, 2011
• 8:09

  NetworkMiner v1.1 Released – Windows Packet Analyzer & Sniffer

   » ‎ Darknet
  NetworkMiner is a Network Forensic Analysis Tool (NFAT) for Windows. NetworkMiner can be used as a passive network sniffer/packet capturing tool in order to detect operating systems, sessions, hostnames, open ports etc. without putting any traffic on the network. NetworkMiner can also parse PCAP files for off-line analysis and to...
  
  Read the full post at darknet.org.uk

  
  

  

  Tags:  network networkminer windows read network-sniffer open-ports passive-network forensics  

• May 12, 2010
• 1:25

  [Paper] Neurosurgery With Meterpreter

   » ‎ SecDocs
  Authors: Colin Ames David Kerb
  Tags: Metasploit meterpreter
  Event: Black Hat DC 2010
  Abstract: A crucial step in post-exploitation technology is memory manipulation. Metasploit's Meterpreter provides a robust platform and API on which to build memory exploitation tools to assist the attacker in post-exploitation tasks. This talk will cover several examples of memory manipulation using meterpreter and introduce an extension to aid post-exploitation activities. We will demonstrate the extraction of unique process memory to analyze for valuable information such as passwords. We will also demonstrate the injection of utilities into a processes memory in order to alter execution flow to provide new "features" like Putty Hijack. Another example that will be covered is interacting with the lsass process memory in order to steal windows session hashes required for pass the hash. Finally we will discuss the use of meterpreter to patch process memory in order to introduce vulnerabilities which can be leveraged for things such as persistence. Another form of "memory" is the knowledge a host has about its network environment. This presentation will discuss the utilization of a meterpreter extension to automate and facilitate passive network reconnaissance over time, allowing for smart network data acquisition and analysis.

  Tags:  memory order meterpreter colin-ames david-kerb exploitation-activities passive-network