betterdeadthanreddit

Inspired by this post.

Anybody else have this issue?

I was in the middle of something in another room and it occurred to me that this familiar expression could be adapted for ADHD: A watched pot never catches fire. Good reminder to exercise a little extra caution in the everyday tasks that get boring but are still dangerous if you get complacent. Driving, cooking, poking around in a running computer with screwdriver even though you know you should shut it off, that sort of thing.

Now if you'll excuse me, I should get back to cooking breakfast before the "food is done" alarms start going off throughout the building.

1972 paper measuring speed of light.

cross-posted from: https://lemmy.world/post/3494377

Took a while to get here, any ideas for what to do with it?

[Edit: Image broke so I've hosted it elsewhere.]

Took a while to get here, any ideas for what to do with it?

[Edit: Image broke so I've hosted it elsewhere.]

User @[email protected] (Soraya Pepe) is advertising a forum service as well as a booking site where you can order donuts* that they'll deliver to your hotel room. They are using bit.ly links to obscure links to their forum topics in community sidebars as well. These communities are [email protected] and [email protected].

@[email protected] has created 80+ communities here, most of which are empty save for a "Looking for moderators" post. Some have 0-3 posts which are nearly all from the creator and a couple have some regular user activity.

I recognize that this may not be against the rules as long as it's not simply for the purpose of squatting on a name but is worth observing for future developments. It does not appear that this user intends to actively moderate since they're looking to hand those communities off as soon as they're created.

https://lemmy.world/u/HeGetsUs_ad / https://lemmy.world/c/hegetsus

"He Gets Us" advertising campaign setting up on this instance.

Edit: And it's gone. Thanks!

The image was in one of my old document folders alongside some saved image macros and things. Think he was called Candleman, Candlejack, Candlestick, something like that. I just don't remem-

[Note: The content of this post has been copied from /r/Pentesting in case users wish to continue the discussion during the reddit API price gouging blackout]

Original

Responder and NTLMRelayx

/u/ j_relic

I’m practicing pentesting using Responder. I’ve watched a few videos on YouTube, but I’m having issues. My setup: Windows Server 2019 VM, Windows 10 VM, and the latest Kali. I used a video to create the vulnerable Active Directory Environment (YouTube, the Cyber Mentor). Responder version 3.1.3.0.

I’ve been unable to capture hashes using LLMNR poisoning. Responder doesn’t send the LLMNR poisoned answer. In fact, the only answer it sends is MDNS.

I’ve also been unable to capture hashes using SMB Relay Attacks (with Responder and ntlmrelayx). According to the video I used, I ran nmap to determine the smb version I have for Windows Server 2019. I have smb3 (3.1.1), and “message signing enabled but not required.”

I made sure to modify any configurations within the Responder.conf file (according to the videos) as needed. Am I having these issues because SMB is version 3, and not 2 like in the videos? The videos are a few years old.

Any help is appreciated. Thanks. I would like to exploit these types of issues within my homelab setup.

/u/Danti1988

In your training environment, you don’t mention how you are generating traffic for responder to respond to. Set a scheduled task to map a network share that has an incorrect host name, dns will fail and fall back to netbios / llmnr and you will get a hash.

/u/ j_relic

Hi sorry about that—according to the video, I tried entering an incorrect share. For example, I typed //kl as the share and hit enter. Unfortunately, I didn’t get the same results as the video. In the video, the hashes are captured immediately. But for me, nothing. Instead, Edge opens up on the VM in an attempt to open the page as a web address that ultimately fails.

/u/Danti1988

Open run or file explorer and type //kl/blah. Also make sure responder is listening on the correct interface and both nics are on the same interface for the vms

/u/ j_relic

Unfortunately, same problem. The LLMNR poison isn’t sent, only MDNS. Responder sees the attempt, but nothing else further. I’ve verified that the interface is correct, and the VMs are on the same interface (for their respective nics). All poisoners are set to “On.”

/u/kaltec

Is the vm network adapter set to bridged mode? Kinda sounds like it might be in NAT

/u/Danti1988

If you type in //kaliIP/ are you seeing the hash? If not, it’s definitely a problem with your set up.