Hey guys,
Today I needed to get wireless pass from a network that I didn't know, But I was in a PC connected.
I found a very nice tool developed by Nirsoft called WirelessKeyView, it gives you all the password of network saved in the PC and I thought "man! easy way to collect data of a private company!"
You can wrap this legitimate tool in your malware (this method calls living-off-the-land, when you use legitimate tools in your malware), execute it, get all the passwords, and exfiltrate them to your C2! Now, you have important data about some private PC, like about a company... If you have a wireless pass of a company, you can enter it in a easy way, and you didnt have to use brute force hehe
--
Telegram loki_code
Wirck sagitari0
Coders!