Recently Updated Pages
1) Resize the VM Disk in PVE
Precautions Stop! Take a snapshot or backup of your VM in its current state for easy rollback in...
Adding Additional Storage Disks
Before When installing PVE, you have the option to create a LVM Thin pool or a ZFS Pool, which b...
Clustering: Same ZFS Pool on All Nodes
Example Configuration Showing clustered PVE nodes I have a ZFS volume called Guest_Disk...
Linux Shell Command
LD_PRELOAD Useful in privilege escalation scenarios where sudo command is configured with: env_k...
Port Forwarding with Chisel
Usage Requires a copy of the Chisel binary on: The target host The attacker's host Download...
Adding Persistent Storage to Live-Boot Images
Hardware Configuration Memory: Assigned as needed Hard Disk: Add an extra hard disk to the li...
Evil-WinRM Alternatives
Problem evil-winrm works great in a pinch, but is often very buggy, so I've documented some work...
Troubleshooting
Gopher Agent Generation Problem Need to generate an agent implant for LINUX TARGET (see diagram...
NoMachine Customizations
Auto-Login On Kali side, go to Startup & Shutdown > Login Screen (SDDM) and click Behavior . Set...
Using an Ad-Hoc Nginx Server to Catch-Web Requests
Set up Custom Logging sudo apt install -y libnginx-mod-http-lua Install Nginx LUA libraries su...
Windows File Downloads
PowerShell .NET Reflection [System.Net.WebClient]::new().DownLoadFile('http://somesite.com/file...
Enumerating Hosts and Identifying the Domain Controllers
Fingerprinting Domain Controllers PORT STATE SERVICE 53/tcp open domain 88/tcp open...
Finding Build Manifests
Assuming you have some means of reading server-side files, these are some examples of places you ...
Architecture
[10.6.6.0/24] [10.9.9.0/24] [10.80.80.0/24] ...
LdapSearch
When to Use You'll know when you've found a domain controller, because it will have several port...
Get User Input (Shell Agnostic)
function getUserInput () { if [ $# -gt 1 ] ; then echo "Usage example: $0" ...
Manual Enumeration with Nmap
Find WordPress NSE Scripts find /usr/share/nmap/scripts -name '*wordpress*' Enumerate WordPre...
jq
Selecting JSON Properties Property Name Contains Dashes { "first-name": "john", "last-nam...
Kerberoasting
Overview The attacker uses a known username and password of a user on a domain. A typical Kerbe...
Installing FleetDM Management Server
Official Documentation https://fleetdm.com/docs/deploy/reference-architectures#infrastructur...