This talk given in May 2011 talks about network attack collaboration. The communication and data sharing problems are touched on, but the real meat of this presentation is Armitage's session sharing capability. If one team member gets access to a host, any other team member can use that session--seamlessly. This talk shows how it works and demonstrates the technology.
Armitage and Metasploit Collaboration Raphael Mudge NoVa Hackers May 2011 from Georgia Weidman on Vimeo.
I also didnt have a fancy 'jump to url' option when I clicked on the title bar and none of the hot keys were working for me. So goal was to get a web broswer or cmd shell.
I was able to create macros though. So first I added the developers ribbon.
Click the visual basic button, and paste in some sweet macro code.
Then you save the file as macro enabled workbook.
Once its saved, you can hit the macro button and run your macro.
and get shell
The code
Sub GETSHELL()
'execute EXE file
Shell 'CMD /K C:\windows\system32\cmd.exe', vbNormalFocus
End Sub
Fake anti-virus attacks have become more sophisticated and professional in their appearance, convincing more innocent computer users into making bad decisions. The use of high quality graphics and professional interfaces means that there is a risk that more users are likely to fall for the scams.
The latest fake anti-virus attack, which tricks users into installing malicious software posing as a Microsoft security update. Affected users will see an almost exact replica of the real Microsoft Update page - the only difference being that the bogus page appears while surfing with Firefox, whereas the genuine Microsoft Update site requires Internet Explorer.
The use of the Microsoft Update disguise takes advantage of the monthly "Patch Tuesday" security updates that Microsoft regularly issues, and that users are encouraged to install to defend their computers.
"Users need to be more vigilant than ever before as bogus security alerts pop-up in their browsers. Fake anti-virus attacks are big business for cybercriminals and they are investing time and effort into making them as convincing as possible," said Graham Cluley, senior technology consultant at Sophos. "Malicious hackers are using smart social engineering tricks more and more often, and the risk is that users will be scared by a phoney warning into handing over money to fix problems that never existed in the first place."
Not that you intend to try out FaceNiff, but you can't hijack more
than three profiles. However, FaceNiff app developer Bartosz
Ponurkiewicz says more sites for hopping onto user accounts will soon be
supported. He noted if you want to hijack more than three profiles with
FaceNiff, there will be an option to pay and unlock the code.
FaceNiff has been confirmed to work on rooted mobile phones: HTC
Desire CM7, original Droid/Milestone CM7, SE Xperia X10, Samsung Galaxy
S, Nexus 1 CM7, HTC HD2, LG Swift 2X, LG Optimus black (original ROM),
LG Optimus 3D (original ROM), and Samsung Infuse.
This App is extremely portable 'cause it runs on Android phones - it presents a clear possible attack vector 'cause it's not just for public wireless
networks. Depending how you manage your wireless network at home,
someone could park outside or walk by your house and FaceNiff you.
From the same site as the SWFRETools are some malware write-ups including NiteAim, and Downloader-IstBar. As a complete aside, here's a very interesting Gh0stNet writeup that Chris pointed me to recently (fans of Ron White refer to him as 'Tater Salad'...fans of Chris Pogue should refer to him as 'Beefcake' or 'Bread Puddin''...).
