This is great David! Almost broke out the popcorn. Was thinking about rubber ducky drive labels to add to the list like: “company salaries”, “scheduled layoffs”, “termination list”. I was kinda disappointed with IT’s lack of security on that remote setup (probably based on a true story, unfortunately). I was ready for a brute force password spray using rockyou.txt or similar but dang it was just “too easy”;). I didn’t know you could use nmap inside Operator’s reverse shell. Keep em coming!
one of my favorite phishing + labels to use is... 'company bonuses, executives only'.. people just need to know what their co-workers are going to get in comparison ;)
This is great David! Almost broke out the popcorn. Was thinking about rubber ducky drive labels to add to the list like: “company salaries”, “scheduled layoffs”, “termination list”. I was kinda disappointed with IT’s lack of security on that remote setup (probably based on a true story, unfortunately). I was ready for a brute force password spray using rockyou.txt or similar but dang it was just “too easy”;). I didn’t know you could use nmap inside Operator’s reverse shell. Keep em coming!
one of my favorite phishing + labels to use is... 'company bonuses, executives only'.. people just need to know what their co-workers are going to get in comparison ;)
Great labels! Curiosity killed the cat;)