I missed the Dissecting Malware webinar last week. Is there a way I can watch it now?

Anytime @Marco-Salameh you are most welcome

Great informations thanks @Michael-McKenney

Image result for stand alone payload msfvenom
Part of the Metasploit Framework, msfvenom is a command-line tool that helps penetration testers to generate stand-alone payloads to run on compromised machines to get remote access to the system. ... Encoding the payload is easy, too. Simply type in the characters you'd like to see excluded from the payload

I am on Try Hack Me. A stand alone payload is a file you create to load on a target machine to use as a exploit. Try Hack Me has attack boxes and many rooms to practice and learn in.

Thanks so much, Daniel! much appreciated.
I will be trying the proxychains command with -sT switch to see if that helps and thanks again for such a detailed explanation!

Hello again, @Shahbaz-Khan 😀

Proxychains is a wonderful, yet mysterious product for sure! I will do my best at giving you a useful answer.

If you're following my example, you'll remember that I have a network setup similar to this...

dfabdcd9-3365-4618-a167-b1f029643e18-image.png

To get the ability to use proxychains for nmap or RDP, I have to enabled dynamic port forwarding when connecting to a compromised target using SSH.

254a923c-45b9-4b2d-8b3d-1a9ba939231f-image.png

This will forward the proxychains requests destined for the 192.168.0.0/24 network through your SSH connection to the compromised machine. The compromised host will actually be the device to make those requests on your behalf. So if you don't have that setup, you won't be able to connect to any machines on the other side of the target.

Also, I think with nmap you will need to make sure your scans are Full Connect scans, (the -sT option in nmap), or nmap scans can break or be SUPER slow.

I hope that helps you out.

Cheers,
Daniel

file:///home/dlowrie/Pictures/proxychains-diagram.pngfile:///home/dlowrie/Pictures/ssh-D.png

Hey @Shahbaz-Khan

Glad to hear you got proxychains to work. It is my understanding that you have to enter the proxies that you wish the proxy traffic through.

From the proxychains github README...

To use two (or more) proxies in chain:
like: your_host <--> proxy1 <--> proxy2 <--> target_host

I hope that helps,
Daniel

Hello Craig,
I have the same purpose like yours and the same situation.
I have chosen my patht as:
1- security+
2- cloud+
3-CySA+
4-Pentest+
5- CISSP
I do not know if it is correct path, i hope if one of our moderators advise us,
Note: i am CCNA R/S cerfied and i got CCNP R/S as a college ceroficate.
for that reason i dont need the Network+.
Regards,
Marco

@Erik-Rasmussen,
I don't think they're done with the series. It looks as if Adam still has a few episodes left. So they should be up after it completes.

It might a great addition to have a focused series on bug bounties. I understand there are caveats to the various programs, perks to staying with one or another, pitfalls to avoid, and strategies to maximize time and effort.

@Mark-Faithfull how did you do with your exam using the 2018 material?

Greetings @Keith-Taylor

The good news is that we do have courses covering many, if not all, of those topics you mentioned. We have the 'Penetration Testing' series which covers many of the basic tools/techniques that you're looking for. We also have the 'Hands-On Hacking' series which helps you work on your methodology utilizing CTFs as the targets. Also, while you might not be on the certification path, much of this is also covered and demonstrated in the Pentest+ and CEH series.

Now, all that said. CTFs are usually meant to be a kind of hacking puzzle and many of them don't necessarily reflect a 'real world' experience. I wouldn't feel too bad about having to look up the solution to some CTFs as there are probably some things in many of them that you just don't know about because they're really esoteric, or they're fairly new vulnerabilities/technologies making it unlikely that you'd have much, if any, experience with them. Just do the best you can, and when you reach a sticking point, realize this is just a learning opportunity and you'll be a better hacker after you learn about whatever it is that is stopping you from completing the challenge.

I hope that helps,
Daniel

Looking more in-depth, the specific part of Johns Hopkins that meets National Centers of Academic Excellence in Cybersecurity standards is its Information Security Institute (ISI). The ISI offers a Master of Science in Security Informatics (MSSI) degree, which is different from the Master of Science in Cybersecurity degree that I linked to above.

@daniel-lowrie87 said in Hacking Forum:

/

If your using tryhackme.com they also have an active discord server.

@Adam-Gordon Hey Adam! Last night 4/30/2021 I took my CISSP. Got it in just before the change and the price increase. I used your 2018 Course and pieces of the Accelerated Course to study. I passed in just under 2 hours with between 120-13o questions! Thanks so much for your training.

Thanks for the input Daniel. I did some basic searches and nobody really knows the CFR 310. I think I will be doing the SSCP instead of CFR 310.

What is the name of the file for the CISSP algorithms notes? I can't seem to find it, while I am sure it is there...