Cyberbits

  • Metasploit EternalBlue, Hearthbleed, i.e.

    Introduction A while back I wrote a beginner Metasploit post where I popped a Metasploitable box. Since then I’ve kept poking at things, and a few features finally clicked. So here’s a more intermediate follow-up; two classic exploits, the shell upgrade trick I now use and the post-exploitation moves that make the framework feel like…

  • Automated lab setup on a Mac

    Introduction Last time I built a single Kali workstation on the Mac by hand: install the VM, update it, duplicate it, keep the clone clean. That’s fine when you need one attacker box. It stops being fine the moment you want a target to point it at, and then a second target, and then a…