Archive for November, 2017

BlueTooth Vulnerability Paper (Now Patched)

November 23, 2017

These items are supposed to be patched now but it shows the need to be careful with BlueTooth. I turn off Bluetooth so I do not have to worrying about Bluetooth only being disabled.

Click to access BlueBorne%20Technical%20White%20Paper.pdf

The source that pointed me at the article:
https://isc.sans.edu/podcastdetail.html?id=5758

PowerShell Computer and Network Information

November 20, 2017

What you may find is you cannot run PowerShell; so if you can then you can try the sample PowerShell to get computer and network information; PowerShell had restricted access with my admin account so it did not work;

The PowerShell code follows after the paragraph:
“It is useful to learn more about the victim, let’s grab some information about the computer and its network. You can also see how to detect if Powershell has admin rights and if the computer is a domain member.”

article:
https://isc.sans.edu/forums/diary/Some+Powershell+Malicious+Code/22988/

 

You can see what kind of PowerShell access you have, with the following PowerShell command:
Get-ExecutionPolicy

source:
http://www.itprotoday.com/management-mobility/running-powershell-scripts-easy-1-2-3
in the section labelled “2. Set PowerShell’s Execution Policy”

File Extensions Lists

November 19, 2017

Resource if you are trying to determine a file extension.

https://en.wikipedia.org/wiki/List_of_filename_extensions

Also an utility that will try to identify file types:
http://mark0.net/soft-trid-e.html
(I have not tried it out yet, just noted here for reference)

Source of the article I used to find this:
https://isc.sans.edu/forums/diary/Stop+relying+on+file+extensions/22962/

Generating Random User Information

November 18, 2017

https://randomuser.me/api/0.4/?randomapi
https://randomuser.me/

I am still working on ways to use it and how to use it.

Sources to find this link:
https://isc.sans.edu/podcastdetail.html?id=5712
https://www.bleepingcomputer.com/news/security/chrome-extension-uses-your-gmail-to-register-domains-names-and-injects-coinhive/