DTS-Shield IT Security News
Poor Passwords Tattle on AI Hiring Bot Maker Paradox.ai
Security researchers recently revealed that the personal information of millions of people who applied for jobs at McDonald’s was exposed after they guessed the password (“123456”) for the fast food chain’s account at Paradox.ai, a company that makes artificial...
DOGE Denizen Marko Elez Leaked API Key for xAI
Marko Elez, a 25-year-old employee at Elon Musk’s Department of Government Efficiency (DOGE), has been granted access to sensitive databases at the U.S. Social Security Administration, the Treasury and Justice departments, and the Department of Homeland Security. So...
UK Charges Four in ‘Scattered Spider’ Ransom Group
Authorities in the United Kingdom this week arrested four alleged members of “Scattered Spider,” a prolific data theft and extortion group whose recent victims include multiple airlines and the U.K. retail chain Marks & Spencer. Scattered Spider is the name given...
More X11 Hacking with xspy and xwatchwin
I’ve posted about open X11 servers before, including keylogging and grabbing an image of the desktop. Today I just want to add a couple other tools to the toolbelt. To learn more about X11, see the other posts as they describe it in better detail. Setup Your Testbed...
Attacking XML with XML External Entity Injection (XXE)
Within XML, there is a way to inject an external file. For a long time, automatic XML parsers (using libxml2 in the backend) had this enabled by default. So when XML is used as a means to format and pass data around, the website is very likely vulnerable. XML is...
Crashing Windows Server 2012 with a One-Liner
Yesterday, Microsoft released the MS15-034 patch for the CVE-2015-1635 vulnerability. Today, enough people have reverse engineered it to figure out this is a pretty big deal. Short version: You can send a blue screen of death to a variety of Windows OS’s running IIS...
Grabbing Passwords from your Domain Controller (GPP MS14-025)
Another tool that is part of the Powersploit toolkit mentioned earlier is Get-GPPPassword. One way to add a user (or change a password) for many users in a domain is through Group Policy Preferences (GPP). This essentially adds a GPO to the domain with a username and...
Sending Custom IP Packets
Sometimes during testing, you need to send custom created packets. This is just a short post for two tools that I recommend: Colasoft The Colasoft Packet Builder is a neat GUI tool for Windows that makes packet replay easy. You can create customized IP packets, or...
Obfuscating Meterpreter Payloads with Veil
I am a big fan of using meterpreter as a post compromise payload. It has so many tools that makes all the next steps so much easier. The problem is, every antivirus out there will catch meterpreter. Metasploit comes with a handy obfuscator, but even that always...
Contact Us
Fill out the form to request Service Assessment and learn how we can make your technology worry-free!
Please be advised that we don’t accept emails sent from free services like gmail.com, yahoo.com, hotmail.com and similar due to increased level of spam coming from these domains.
Follow us on social media: