https://wearethebug.dev/tags/phishing/Recent content on WE ARE THE BUGTradecraften-usSun, 09 Mar 2025 00:00:00 +0000https://wearethebug.dev/posts/vl-shinra/Sun, 09 Mar 2025 00:00:00 +0000https://wearethebug.dev/posts/vl-shinra/Shinra is a Hard-rated Red Team lab designed for those with foundational AD and pentesting knowledge to refine covert red teaming skills. Players focus on AD enumeration, exploitation, certificate services, lateral movement, phishing, CI/CD attacks, EDR bypass, backdooring apps, and relay attacks while evading real-time detections.https://wearethebug.dev/posts/vl-job2/Wed, 10 May 2023 00:00:00 +0000https://wearethebug.dev/posts/vl-job2/Job2 is a hard-rated Windows machine that involves a macro phishing attack for initial foothold. The machine has hMailServer installed, which includes a configuration file containing encrypted credentials for the database connection. After extracting the password database, we decrypt the SQL Server Compact database file (SDF), allowing a compromised user who can use WinRM to the machine. The machine has a vulnerable version of Veeam Backup & Replication; the attacker executes a malicious executable under sqlserver.exe, which is running as SYSTEM to gain full access.