Reply to thread

Message

<blockquote data-quote="MayoMayn" data-source="post: 395299" data-attributes="member: 71840">You do realize there's a metasploit program, that is made specifically for what you've just written right?Easily done, install Beef, lets say the user is running a Chrome Browser, or you know his g-mail and which bank he has, then you can easily fake an e-mail which looks trustworthy, they will then go on to the fake &quot;bank&quot; site, and see a fake &quot;new Google Chrome update&quot;, because well, trustworthy source right, if they need the latest versions for example to log into their bank. They download it, executes the file, and boom they got a shell, or whatever it is called, been ages since I used the system, then they continue after thinking wtf just happened, and after that you pretty much have control over the persons computer. What if they have antivirus? No worries, use Veil Invasion, which only gets detected by some pretty much unknown russian antivirus software.Hacking is not just about utilities and tools on a computer, but also about human interaction, and how they think.For example Hobba.me is stupid enough to have myBB which has a file uploader that is not really that good encrypted, you can easily fake a .php shell as an image using Burpsuite or just simply but a &quot;.jpg&quot; at the end of the files name, then go to the direct url where the shell has been uploaded, access it, and boom the web server has a shell.</blockquote>

[QUOTE="MayoMayn, post: 395299, member: 71840"] You do realize there's a metasploit program, that is made specifically for what you've just written right? Easily done, install Beef, lets say the user is running a Chrome Browser, or you know his g-mail and which bank he has, then you can easily fake an e-mail which looks trustworthy, they will then go on to the fake "bank" site, and see a fake "new Google Chrome update", because well, trustworthy source right, if they need the latest versions for example to log into their bank. They download it, executes the file, and boom they got a shell, or whatever it is called, been ages since I used the system, then they continue after thinking wtf just happened, and after that you pretty much have control over the persons computer. What if they have antivirus? No worries, use Veil Invasion, which only gets detected by some pretty much unknown russian antivirus software. Hacking is not just about utilities and tools on a computer, but also about human interaction, and how they think. For example Hobba.me is stupid enough to have myBB which has a file uploader that is not really that good encrypted, you can easily fake a .php shell as an image using Burpsuite or just simply but a ".jpg" at the end of the files name, then go to the direct url where the shell has been uploaded, access it, and boom the web server has a shell. [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members