Evan Anderson’s Post

🎉 Another Milestone Achieved! 🚀 I’m thrilled to share that I’ve completed the TryHackMe "Network Services" module! 🔐📡 This module deepened my understanding of critical services like FTP, SSH, HTTP, and how they can be explored and secured in real-world scenarios.

One of the Forela WordPress servers was a target of notorious Threat Actors (TA). The website was running a blog dedicated to the Forela Social Club, where Forela employees can chat and discuss random topics. Unfortunately, it became a target of a threat group. The SOC team believe this was due to the blog running a vulnerable plugin. The IT admin already followed the acquisition playbook and triaged the server for the security team. Ultimately (no pun intended) it is your responsibility to investigate the incident. Step in and confirm the culprits behind the attack and restore this important service within the Forela environment. #hackthebox #DFIR

In a recent post by my colleague Apurva Goenka, we discuss DNSForge, a novel attacker tactic for responding to name resolution requests made to the authoritative DNS server in an internal network landscape, achieving interception and reuse of system credentials without user interaction. Read more and access the GitHub code here: https://aon.io/3ZzNZXC

⚔ Digging for XSS Gold: Unearthing Browser Quirks with Shazzer 🛣 For those who do Web Application Security and are familiar with HackVector-and for those who aren't familiar with it, it's worth checking out-Gareth Heyes' new project is very interesting: Shazzer, a fuzzer to analyze various browser behaviors, in particular, to see when they go into quirks mode, collaboratively. 🎞 https://lnkd.in/d9Y54uQV #websecurity #fuzzer #xss

"Digging for XSS Gold: Unearthing Browser Quirks with Shazzer" is now live on YouTube! Discover powerful techniques to hunt XSS vulnerabilities with Shazzer. Watch now and start exploring browser quirks like a pro! https://lnkd.in/ees5zqNd

Here to share completion of my first room on tryhackme.com. I have summed up the basics, answering what is Active Directory on my blog at https://lnkd.in/dgSPu2ZY

Are you sure your passwords are secure? 🔒 Do you have passwords that could easily be guessed? ⚠️ Find out what good passwords contain in our weekly tech tip! Book a call - https://lnkd.in/grXM6ffR

I was able to tackle Attacktive Directory room at tryhackme and I really learnt a lot about how an adversary can play his way out and escalate previleges on the domain conroller that is vulnerable. Also, I was able to use various tools like enum4linux, nmap, impacket, evil-winrm, smbclient e.t.c to collect information about the room and map my way to gaining escalated previleges.

Johnathan nailed this on the head a while back. Considering the very convoluted xz/liblzma (https://lnkd.in/dnrYKdAh) exploit that was found by pure chance. The backdoor was notable for its level of sophistication and for the fact that the perpetrator practiced a high level of operational security for a long period of time while working to attain a position of trust. You have to assume Closed and Open Source Software have all been compromised over time.  With Outsourcing or Offshoring, is even easier to Inject a whole team of Malicious Players into a company/project by a Malicious actor. #opsec #security #Vulnerabilities

👁️🗨️Nmap: The ultimate guide The Network Mapper (Nmap) is a network scanning and hosting tool that is very useful during many steps for a complete penetration test.