Tutorials - DemmSec

DemmSec

Sign in Subscribe

Tutorials

Pentesting Tutorials

Exploiting fully patched Office 2016 using CVE-2018-0802

Exploiting fully patched Office 2016 using CVE-2018-0802

What’s up guys? Microsoft recently released a security advisory which included a vulnerability in Microsoft Office 2016 which can allow a potential attacker to run code on a target’s computer. My first question.. HOW!?! So this is how you do it: First off we need to clone a

Hack Outlook with ZERO user interaction

Hack Outlook with ZERO user interaction

There’s definitely something more appealing about a hack that doesn’t require user interaction.. It just makes everything feel a bit more like its going to work. I was shown and stumbled across a tool called Ruler, which allows you to interact with the Exchange/Outlook Web Access API

Track any smartphone using a simple web page

Track any smartphone using a simple web page

What you will need * A server somewhere – I recommend a Digital Ocean VPS * A domain name Setting everything up I’m assuming you’re already logged into your VPS using SSH so I’ll start from there. The first thing you’re going to need to do is point your

Automate Phishing Emails with GoPhish

Automate Phishing Emails with GoPhish

A simple phishing toolkit created by Jordan Wright. That is a framework that allows the easy management of phishing campaigns. It even handles the malicious web pages that you create. This is available for all OS types and you can grab this tool from github.com. For this tutorial, we

HOW TO MAKE MALWARE UNDETECTABLE! (SHELLTER)

HOW TO MAKE MALWARE UNDETECTABLE! (SHELLTER)

This one is pretty simple if you’re using Windows. You can simply head over to the Shellter Website and download the binary and away you go… If you want to run Shellter on Linux, specifically Kali Linux, there’s a few things you need to set up first. If

How to install Metasploitable 3

beginner hacking

How to install Metasploitable 3

Metasploitable is a range of intentionally vulnerable virtual machines that you can use to learn about exploits and how to use Metasploit. Metasploitable 3 is quite a lot different from Metasploitable 2. In 2 you could simply unzip a file and launch the virtual machine. In Metasploitable 3 you need

Steal Hashes with Bettercap

To steal hashes with Bettercap there’s a few things we need to do first. In Kali we will need Bettercap and Responder. Responder is installed by default, but it might be worth gettting the version from Git, but it’s not neccesary though. As for Bettercap, luckily, there is