Tutorials Archives - RedPacket Security

News Tutorials

How To manually check CVE-2021-3156 | Sudo buffer overflow

January 27, 2021January 27, 2021 admin buffer overflow, CVE-2021-3156, exploit, sudo, vulnerability

To test if you are vulnerable to sudo buffer overflow for CVE-2021-3156 use the following command
sudoedit ….

Tutorials

Empire 3.7 and Starkiller 1.6

January 27, 2021 admin hacking, OSINT, Security, threatintel

Last week we announced a new partnership with Kali for Starkiller and Empire. You can read up more about that

Tutorials

Kali and BC Security Partnership

January 20, 2021 admin hacking, OSINT, Security, threatintel

Background In November, Kali announced a new program for supporting tool developers, which kicked off with sponsoring Byt3Bl33d3r. We are

Tutorials

KDE Plasma, NVIDIA Prime and External Monitor problems

January 16, 2021January 16, 2021 admin KDE, kubuntu, linux, nvidia, plasma, plasmashell, troubleshooting

A tutorial explaining a workaround fix for KDE plasma / NVIDIA crashing to a black background and no taskbar in Kubuntu with an external monitor.

Hack The Box Tutorials

Hack The Box Walkthrough guide to: Delivery

January 13, 2021January 13, 2021 admin delivery, enumeration, hack the box, helpdesk, ippsec, mattermost, mysql

Come and read the step by step walkthrough guide to Delivery on Hack The Box.

We start with a nmap scan to see what ports are available…

Tutorials

Bug Bounty API Key Testing CheatSheet

January 12, 2021January 12, 2021 admin API, bug bounty, cheatsheet

A list of commands that can be used to test API keys that are found in Bug Bounty engagements.

Tutorials

How to Integrate a Thinkst Canary Token with Telegram

January 6, 2021January 6, 2021 admin canary token, Defensive, Integromat, offensive, Purple Team, red team, telegram, Thinkst, tutorial

WTF is a canary token I hear some of you ask? Well, they are pretty nifty little things. If that

Hack The Box Tutorials

Hack The Box Walkthrough Guide to: ID Exposed

January 5, 2021January 13, 2021 admin challenge, google, hack the box, OSINT

Hack The Box Walkthrough Guide to: ID Exposed using Google and OSINT

Tutorials

Whitelisting an IP address in ModSecurity , WordPress troubleshooting, integration and automation.

December 30, 2020December 30, 2020 admin automation, comodo, discord, integration, Integromat, modsecurity, Reddit, wordpress

I have been recently been using Integromat.com for some automation and integration work. IF you are wondering what it is,

Hack The Box Tutorials

Hack The Box Walkthrough Guide To: Doctor

December 29, 2020January 13, 2021 admin burp, enumeration, hack the box, linux, netcat, privilege escalation, Server Side Template Injection, splunk, SSTI

Start with a nmap scan, then we want to open burp suite and navigate to…

Hack The Box Tutorials

Hack The Box Walkthrough Guide To: Omni

December 27, 2020January 11, 2021 admin hack, hack the box, iot, iot-core, metasploit, netcat, rce exploit, Remote Code Execution, safebreach, sirepRAT, Windows, windows-iot

EDIT: Now unlocked for all as the machine has been retired. Disclaimer: I do NOT want you to read this

Tutorials

How to install Tilix on Kali Linux

December 26, 2020December 26, 2020 admin kali, linux, sudo, tilix, tutorial

Do you love using Tilix, but found that the latest version of Kali Linux doesn’t seem to support installing it

Hack The Box Tutorials

Hack The Box Walkthrough Guide To: Academy

December 26, 2020January 13, 2021 admin academy, enumeration, guide, hack, privilege escalation, root, tutorial

I start up the machine then always start with a quick Nmap and the follow it up with a more intense one shortly after. I highlight things that look interesting and may warrant further investigation.

Tutorials

Adding Telegram notification to Synology NAS Watchtower

December 7, 2020December 7, 2020 admin docker, shoutrrr, synology, telegram, watchtower

I am going to assume you have already got your NAS working, with a working install of WatchTower.Once that is

Tutorials

Return of the CLI

December 1, 2020 admin hacking, OSINT, Security, threatintel

The new Empire CLI is out and includes some big changes to the user experience. We rebuilt the CLI to

Tutorials

Overview Of Empire 3.4 Features

September 29, 2020 admin hacking, OSINT, Security, threatintel

Its been about 2-weeks since we released Empire 3.4, and hopefully, everyone has had a chance to check out all

Tutorials

Empire: Malleable C2 Profiles

September 9, 2020 admin hacking, OSINT, Security, threatintel

Empire 3.4.0 is our next major release and is packed with one of the most advanced features to-date, Malleable C2.

Tutorials

PowerShell Logging: Obfuscation and Some New(ish) Bypasses Part 1

August 26, 2020 admin hacking, OSINT, Security, threatintel

While giving our talk at the DEF CON Red Team Village a couple of weeks ago, I previewed a PowerShell

Tutorials

Random SMTP Fun with Telnet

August 26, 2020 admin hacking, OSINT, Security, threatintel

Over the weekend, we were setting up a virtual range for our upcoming class this weekend and was testing a mail server.

Tutorials

Reflective PE Injection in Windows 10 1909

August 26, 2020 admin hacking, OSINT, Security, threatintel

Last month we taught our DEF CON 27 workshop, Introduction to Sandbox Evasion and AMSI Bypasses, as a webinar. It

Tutorials

Using the OneDrive Listener in Empire 3.1.3

August 26, 2020 admin hacking, OSINT, Security, threatintel

Anthony Rose | Jake Krasnov As part of the update to Empire that we pushed out today, the OneDrive listener

Tutorials

An Introduction to Starkiller

August 26, 2020 admin hacking, OSINT, Security, threatintel

Vincent Rose | Jacob Krasnov | Anthony Rose Today we are excited to announce the release of Starkiller! Our multi-user

Tutorials

An Introduction To Offensive Security

August 26, 2020 admin hacking, OSINT, Security, threatintel

Jacob Krasnov | Anthony Rose This blog is going to be the first entry in a series that goes over

Tutorials

Why are Frida and QBDI a Great Blend on Android?

August 4, 2020 admin malware, OSINT, reverse engineering, Security, threatintel

Introduction Reverse engineering of Android applications is usually considered as somewhat effortless because of the possibility of retrieving the Java

← Previous