Sam's Information: September 2018

Saturday, September 1, 2018

Fix Corrupt Windows System Files

To fix corrupt Windows system files, use the following commands:

chkdsk C:

If any errors are found, use the /f switch:

chkdsk C: /f

sfc /scannow

DISM.exe /Online /Cleanup-image /Scanhealth

DISM.exe /Online /Cleanup-image /Checkhealth

DISM.exe /Online /Cleanup-image /Restorehealth

RITA

RITA is an open source framework for network traffic analysis.

The framework processes Bro logs, and currently supports the following analysis features:

Beaconing Detection: Search for signs of beaconing behavior in and out of your network
DNS Tunneling Detection Search for signs of DNS based covert channels
Blacklist Checking: Query blacklists to search for suspicious domains and hosts
URL Length Analysis: Search for lengthy URLs indicative of malware
Scanning Detection: Search for signs of port scans in your network

https://github.com/activecm/rita

Free TV and Movie Streaming Services

Below is a list of available free TV and movie streaming services.

https://www.roku.com/whats-on/the-roku-channel

https://pluto.tv/tv/pluto-tv-movies

https://tubitv.com/

https://www.sonycrackle.com/

https://view.yahoo.com/

https://www.xumo.tv/

Application whitelisting with “AaronLocker”

Aaron Margosis has created a number of PowerShell scripts to assist with the document AppLocker policies and capture event data into Excel workbooks.

https://blogs.msdn.microsoft.com/aaron_margosis/2018/06/26/announcing-application-whitelisting-with-aaronlocker/

USB Restricted Mode within iOS

With iOS 11.4.1, a feature called USB Restricted Mode was included. This option adds protections against the USB devices being used by law enforcement and private companies that connect over Lightning to crack an iPhone’s passcode.

Go to Settings and Face ID (or Touch ID) & Passcode. Verify that USB Accessories option is disabled. The switch should be off by default. Once an iPhone or iPad has been locked for over an hour straight, iOS will no longer allow USB accessories to connect to the device.

Sn1per

Sn1per Community Edition is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities. The Community version includes the following parameters:

Automatically gather recon on target environments

9 Scan modes to meet any pentest scenario

16+ Auto-pwn exploits added

HTML/TXT/PDF reporting of all scans

Workspace creation and storage of all scan data

https://www.kitploit.com/2018/07/sn1per-v50-automated-pentest-recon.html

https://github.com/1N3/Sn1per

https://xerosecurity.com/