who's up for some shenanigans?

1. 2015-11-30 at 5:59 PM UTC

   #1
   

   Sophie Pedophile Tech Support
   So a bit ago before my intertube connection kicked the bucket i found some lulzy things. There is a site, and this site is on a server, the server is connected to a local network. It so happens the site is vulnerable to OS command injection. I can do some magic and get a pseudo shell easily enough but to get to the most juicy data we are going to have to pivot into the network. So i was thinking, we get payload handler running on a jump box, and generate a reverse tcp meterpreter, configured to connect back to the jump box we have our handler on. Which i will then pull down using the pseudo shell i got through command injection. Then we cqn either use metasploit native modules to see if we can spawn some shells or meterpreter sessions on the network itself or usw proxychains and the proxy4a module to run any other kind of tools we may need through the box we got our meterpreter session on. I was considering a rootkit, since hackimg team had a dank one for Linux systems but the logistics of that would be a little more involved than just pulling down a meterpreter. Noobs need not apply and opsec is mandatory, hence the jump box etc.
2. 2015-11-30 at 6:07 PM UTC

   #2
   

   Sophie Pedophile Tech Support
   I would do it on my own but i do not have a jump box to act as proxy for our meterpreter, the beauty of course being is that you can send your commands to the payload handler through tor since it is but text.
3. 2015-11-30 at 11:39 PM UTC

   #3
   hydromorphone victim of incest [insincerely conduce my paisley]
   I was going to say 'shenanigans' reminded me of Super Troopers. Anyway, I am a noob posting from a shitty cellphone, I am no good to you. Though I am a lvl 17 cleric and could caste spells of luck and increases treasure finds +5 or a duration of 45 minutes. I dont see where my spells of stonewall would help here, but I could caste that too. You might walk away with super awesome data with my spell to increase luck and treasure finds. It might even be the holy grail of loli porn. You could really use a cleric like me in your party of 'shenanigan' doing cocksuckers. Anyway, Good luck.
4. 2015-11-30 at 11:49 PM UTC

   #4
   The Self Taught Man Black Hole

   Noobs need not apply and opsec is mandatory, hence the jump box etc.

   
   
   
   
   
5. 2015-12-01 at 3:15 AM UTC

   #5
   

   kroz weak whyte, frothy cuck, and former twink
   Im up for some of teh shennanagins!11
6. 2015-12-01 at 12:29 PM UTC

   #6
   The Self Taught Man Black Hole
   Damn, some of my early posts on this site were cringeworthy as fuck
   
   Post last edited by Kolokol-1 at 2017-04-23T12:28:17.276507+00:00
7. 2015-12-01 at 4:53 PM UTC

   #7
   

   Sophie Pedophile Tech Support

   I get the feeling that this whole OP is made up bullshit and he's waiting for someone to suggest something just so OP can call bullshit

   
   i understand technical jargon sounds like black magic to the lay person but i assure you it makes sense when you know what the words mean.
8. 2015-12-01 at 4:54 PM UTC

   #8
   

   Sophie Pedophile Tech Support

   

   
   Fine you can come too, we will use your PC as jump box, lel.
9. 2015-12-02 at 7:07 AM UTC

   #9
   MR.HAI Yung Blood
   HA2U
   
10. 2015-12-02 at 3:42 PM UTC

    #10
    Hewfil1 Houston
    ^SHUT THE FUCK UP.
    
    Also, definitely up for the cheeky nandos.