Its not a remote exploit so you would have to convince someone to open your .m3u or .pls file.

Topical and interesting:

http://www.networkworld.com/news/2011/062811-symantec-mobile-report.html?source=nww_rss

I think you've got enough to start OSCP. I wrote a detailed review awhile back, it might help give you some additional insight http://www.networkadminsecrets.com/2010/12/offensive-security-certified.html

Check this out
http://www.backtrack-linux.org/wiki/index.php/Wireless_Drivers

It shouldn't take that long. Jump on their IRC and ask an admin. Channel is #offsec

-C

El33tsamurai

That is why you should do OSCP! Because you don't know any of that!

Lulz is denying that he is the leader. They said the only way he was affiliated with them was that he hosted one of their public/legitimate IRC servers. Who knows what the real story is.

They're way to chatty not to get caught. They'll make a mistake at some point.

Kick ass. Thank you.

That is one way to use it but his tool SET has a payload called the SET Interactive Shell that uses this. He's already built all the SE tools to make this all work nicely. It's very slick and if you have never played with SET go get a copy at secmaniac.com

Does Hacking Dojo have a live lab environment? From my basic searches it doesn't appear so. I think that's one of the most valuable (and funnest) parts of OSCP. You actually have to execute the concepts that they taught you in a foreign environment.

+1 for OSCP

I thought of you when I read this article from Dave Kennedy today. Pretty mother effing cool:

http://www.secmaniac.com/june-2011/creating-a-13-line-backdoor-worry-free-of-av/

You can't help but wonder if EH.net will become a target in this new wave of attacks at some point.

Password change? I think so 

Mubix to the rescue
http://www.room362.com/blog/2011/2/14/cachedump-for-meterpreter-in-action.html

http://lab.mediaservice.net/code/cachedump.rb

There is a module in metasploit to do it, but it's separate from meterpreter. Mubix displayed it here http://www.room362.com/blog/2009/8/26/pass-the-hash-metasploit-demo.html

There is a module in metasploit to do it, but it's separate from meterpretery. Mubix displayed it here http://www.room362.com/blog/2009/8/26/pass-the-hash-metasploit-demo.html