Tips and Tricks

Dear Friend, thank you for visiting HaXeZ. Today I want to talk about shared folders on Virtual Machines. They are a useful feature which allows you to share files between your base operating system and your Virtual Machine. While Virtual Machines do have a bidirectional clipboard that allows you to copy to and from each machine. A shared folder allows for easy access to resources such as wordlists and other large files. Furthermore, they can be particularly useful if you have limited disk space on your Virtual Machine.

Dear friend, welcome to HaXeZ. If you’re new to hacking and cybersecurity then you may have heard about pivoting. If you haven’t then let me explain. Pivoting is where you have compromised a host and discovered it is attached to another network. You then use that host to pivot your scans and attacks to hosts within that other network. For example, imagine you have just compromised a public-facing Web Application server. You check the network configuration and find that it is connected to an internal network. You can then use the compromised web application server to scan that internal network.<br /> <br /> 0:00 Introduction<br /> 0:29 Pivoting<br /> 1:17 Lab Set Up<br /> 9:03 VM1 Exploit<br /> 12:00 Creating The Pivot<br /> 14:00 VM2 Exploit<br /> 19:05 Conclusion<br /> <br /> Music - bensounds.com

Hello world, and welcome to HaXeZ. Today I want to talk about the Domain Name System (DNS). I know, I know, most of you probably already know how DNS works. However, I’m going to be writing an article soon about Firewall Evasion and Data Exfiltration through DNS Tunnelling and I needed to brush up on my DNS knowledge. Never wanting to waste an opportunity, I thought it would make for a good blog post and video so here we are.<br /> <br /> 0:00 Introduction<br /> 0:50 What is DNS?<br /> 6:00 Domain Structure<br /> 9:30 How Does DNS Work?<br /> 13:00 DNS Demonstration<br /> 19:38 Conclusion<br /> <br /> music - bensounds.com

Hello World and welcome to HaXeZ. Today I want to talk about the DNS tunneling software Iodine. Or more specifically I want to talk about data exfiltration and firewall evasion via DNS encapsulation. If you haven’t read my article on DNS then I strongly recommend giving that a quick read-through beforehand.<br /> <br /> Envision a scenario where you’ve successfully socially engineered your way into a super-secret evil organization. You’ve bypassed physical security and have found a sneaky corner office with an ethernet port. You plug your laptop into the network and the DHCP server assigns you an IP address. Next, you compromise a host and attempt to ping your external Command and Control center (C2). You ping your domain name. The ping returns the correct IP address for your domain name but your pings all time out… what do you do?<br /> <br /> Music - Bensounds.com<br /> <br /> 00:00 introduction<br /> 01:10 Scenario<br /> 03:40 Firewall Evasion Explained<br /> 07:20 Domain DNS Configuration<br /> 10:00 Server Configuration<br /> 13:00 Client Configuration<br /> 17:00 SSH Dynamic Port Forwarding<br /> 19:50 Concerns<br /> 22:25 Mitigations<br /> 24:45 Conclusions