Attacking DNS

2 min read Offensive_Techniques
The Domain Name System (DNS) translates domain names into numerical IP addresses. Primarily, DNS operates over UDP on port 53, but it increasingly relies on TCP on port 53 as well. Although UDP

DNS Enumeration

1 min read Reconnaissance
Enumeration using Nmap nmap -p53 -Pn -sV -sC <ip.address> DNS Zone Transfer * A DNS zone represents a segment of the DNS namespace managed by a particular organization or administrator. * If

Living off the land

1 min read Reconnaissance
The phrase "Living off the land" was coined by Christopher Campbell and Matt Graeber during DerbyCon 3. They used it to describe using existing system tools for malicious purposes rather than

Covert Malware Techniques

2 min read Malware_Analysis
What is Covert Malware Launching? It is a technique used by malware authors to blend the malware into normal windows landscape, in an effort to conceal it. Launchers * Launcher (also known as loader)

Vulnerability Assessment Basics

1 min read Reconnaissance
Concepts * Risk: Potential negative outcome or event that could occur. * Threat: Actively occurring negative event or situation. * Vulnerabilities: Weaknesses or gaps that could be exploited, leading to threats. CVSS (Common Vulnerability Scoring System)