Recently Updated Pages
Alternative Network Scans
Generate Target List Linux ip="10.9.9.0"; cidr=24; IFS=. read -r i1 i2 i3 i4 <<< "$ip"; raw=$(( (...
Kerberos Authentication from Kali
NetExec nxc smb DC01.domain.tld -d 'domain.tld' -u 'username' -p 'P@$$word123!' -k Use a username...
Remote Bloodhound
Nmap LDAP Enumeration Acquire DC DNS Name sudo nmap -Pn -T4 -p 389,636 --script ldap-rootdse <dom...
BloodHound
Install and Initial Setup Kali Linux When changing the neo4j user password at initial setup, I w...
Hashcat Help Tricks
Find Hash Format Modules Find supported hash types hashcat -hh | grep -i <hash_type> Show info ab...
procfs Enumeration Pretty Output
Outputs in procfs are separated by null bytes, thus we use tr to translate to new line. find /pr...
Port Forwarding with SSH
Security Considerations Reverse Tunneling This will require you to establish a SSH connection fro...
Output Response Headers Only
curl -sD - -o /dev/null https://domain.tld
zsteg
Installation gem install zsteg for dir in $(find "$HOME/.local/share/gem/ruby" -maxdepth 2 -type ...
Change Default User Account
Running this on a fresh Kali installation. Login as kali user and run these commands to add a n...
SOCAT
Cleartext File Transfer Listener on Attack Box # Start a listener on the attack box and create a ...
Allow Multicast Traffic Across VLANs
Scenario You have multiple VLANs firewalled to segment your network. One such VLAN is an IOT VLAN...
Export a Proxmox VM to VirtualBox
Example VM I want to export the pfsense-deleteme VM and import it into VirtualBox. The procedure ...
Impacket-Addcomputer
When to Use Could be used post-compromise upon enumerating the ms-DS-MachineAccountQuota policy....
XRDP Server on KDE Plasma
Install and Configure XRDP # Install xRDP server sudo apt update && sudo apt install -y xrdp dbus...
VirtualBox: Getting Rid of the Turtle
Problem Microsoft has continued to push many aspects of Windows security under the Hyper-V platfo...
Computer Networking: Encapsulation and Decapsulation
TCP/IP Model vs. OSI Model TCP/IP Model The sender sends from Layer 4 down to Layer 1The recipien...
PBKDF2-HMAC-SHA256
Example Hash Hash is from a recent CTF and therefore, there are no concerns with making it public...
Inspect Guest Disk Contents
This procedure only works for unencrypted disks, or disks where the encryption key is known! List...
Brute Force Web Logon with JSON
Process Overview The basic process to begin brute forcing web logins with Hydra goes like this: ...