zone13.io

Here's how to configure OpenVPN client on OPNSense firewall and selectively route traffic from the network over the VPN tunnel.

This is a replica of the Surfshark VPN post from earlier, adapted for Proton VPN.

I was trying to route traffic from selected clients over the Surfshark WireGuard tunnel using the official documentation here and ran into issues.

💡 This has not been tested in a while.

While using nginx-proxy from jwilder with Cloudflare, one of the common issues you run into is that the logs contain the Docker internal IP rather than the real external IP passed by Cloudflare.

If you have ever tried embedding EXEs in an existing PDF file using Metasploit, most likely you might have come across the error: [-] Sorry, I'm picky.

Wimonitor is a wonderful product from Hacker Arsenal that saves pentesters the hassle of having to configure VMs, carry compatible wireless cards that support monitor mode etc. and comes with a web interface to do the configurations.

This took me quite a bit of time to figure out, hopefully someone finds the steps useful.

MotionEyeOS is a wonderful project by Calin Crisan that converts your single board computer into a video surveillance system in a matter of minutes.

Once you gain access to a system during pentest, you might want to retain access by means of a backdoor.

The best place to exchange a secret is amongst a crowd - unknown.

Question - In a controlled corporate environment with DLP solutions monitoring the HTTP and Email traffic, how would you perform data exfiltration during a Red Team Pentest ?

💡 This issue has been fixed on Windows 8+ as part of MS16-112 issued in September 2016.

In the previous post, a Raspberry Pi Zero was modified to capture hashes (or rather NTLMv2 responses from the client).

💡 Update: CVE-2016-3302 / MS16-112 patch was released by Microsoft to fix the issue.