Computer tricks others might not know

[radditsu]

Originally Posted by r00t [You must be logged in to view images. Log in or Register.]

This can be a remote exploit that is more effective than brute force (and why bother when you could just pass the hash). Also allows you to steal domain level credentials instead of just local. But yea cracking the passwords on a local machine is easy since they use the same crappy hashing algorithm they did 20 years ago. Windows "security" truly is a nightmare and it is yet another reason most infrastructure runs on the superior *nix based operating systems.

Yup but who is going to load linux for a bunch of idiot end users in a production environment.


Also if some hacker asshole has access to the equipment most likely they already have won. Thats why you hire people who are not assholes.

[radditsu]

My users cant wrap their head around a non outlook email interface.

[LulzSect]

I envy you. Mine can barely handle 365 OWA.

[radditsu]

10 times a day " what is this zimbra thing?"



It's the plugin that pops up when it syncs to the server. I now remember to hide it.

I eschewed outlook completely and use the superior zimbra client

[r00t]

I hate outlook. Users who can't handle much more than outlook is how we get stuff like the ILOVEYOU worm.

Also if we're talking about Nancy the office clerk and such-- if someone gains access to their systems noone cares. I'm talking stuff like DoD sensitive data, which simply does not exist anywhere on a Windows file system. I work for a defense contractor and we are assigned laptops with windows which we use to remote into a linux server which is where all development occurs and version control repositories exist. It's a requirement to maintain the certifications we need.

[loramin]

Originally Posted by LulzSect [You must be logged in to view images. Log in or Register.]

Linux is amazing.

FTFY.

[radditsu]

Originally Posted by r00t [You must be logged in to view images. Log in or Register.]

I hate outlook. Users who can't handle much more than outlook is how we get stuff like the ILOVEYOU worm.

Also if we're talking about Nancy the office clerk and such-- if someone gains access to their systems noone cares. I'm talking stuff like DoD sensitive data, which simply does not exist anywhere on a Windows file system. I work for a defense contractor and we are assigned laptops with windows which we use to remote into a linux server which is where all development occurs and version control repositories exist. It's a requirement to maintain the certifications we need.

Find me linux based police management software. Hell. Find me competent police management software. ...

[August]

Originally Posted by r00t [You must be logged in to view images. Log in or Register.]

You can hack windows rather easily without knowing the root password or stealing the hash from memory (lol windows unsalted passwords 2014)

Basically create a named pipe from something with system level privileges, impersonate the pipe, open the thread token, and then spawn a reverse shell with it.

Sources:
http://msdn.microsoft.com/en-us/libr...(v=vs.85).aspx
http://msdn.microsoft.com/en-us/libr...(v=vs.85).aspx
http://msdn.microsoft.com/en-us/libr...(v=vs.85).aspx
http://msdn.microsoft.com/en-us/libr...(v=vs.85).aspx

Isn't this logic flawed with the 'create a named pipe from something with system level privileges'? You don't need to hack a box you're on if you already have system level privileges.

A much easier method is to just use a registry blanker. It's how I got into all my dad's stuff after he died.

[Rellapse40]

iloveu virus was like 1990 *****

[August]

Windows Key +:
Left - dock left
Right - dock right
down - minimize
up - maximize
L - Lock
E - 'My Computer'
D - desktop
M - minimize
Shift+M - restore minimized windows
f - search
r - run
t - cycle thru open programs
1-0 - launch pinned taskbar programs
Shift + number - always spawn new taskbar program
Ctrl + number - last active window of taskbar program
Alt + number - open list of common tasks for that taskbar program
tab - 3d view of programs to tab thru
p - presentation mode
U - for old people
X - mobility center
ctrl + b - open program w/ notification

im sure there's others i forgot 'em all though