Skip to main content

Recently Updated Pages

Dumping DNS Records with adidnsdump

Active Directory Post Exploitation: Enumeration

Active Directory Integrated DNS Dump (adidnsdump) GitHub Repository Installation pipx install ...

Updated 1 year ago by 0xBEN

Passback Attacks

Active Directory Initial Attack Vectors: Multipurpose

What's the Flaw? Usually involves an unsecure device -- like a printer or multifunction device -...

Updated 1 year ago by 0xBEN

Pass the Ticket

Active Directory Post Exploitation: Attacks

Anatomy of a Kerberos Ticket [0;97d82]-2-0-40e10000-t2_felicia.dean@krbtgt-ZA.TRYHACKME.COM.kirb...

Updated 1 year ago by 0xBEN

Computer Networking: IP Addressing and Subnetting

PJPT & PNPT Study Group Lessons Session 2: Nov. 13, 2023

IP Addressing Common Computer Numbering Systems Binary (base 2) -- 0 to 1 Octal (base 8) -- ...

Updated 1 year ago by 0xBEN

Nmap Scanning with Categories

Nmap

Example 1: Nmap script scan with categories Categories https://nmap.org/book/nse-usage.html#n...

Updated 1 year ago by 0xBEN

Enumerating NFS

Nmap

General Information portmapper and rpcbind run on TCP 111 rpcbind maps RPC services to their ...

Updated 1 year ago by 0xBEN

Convert Certificate and Key to PFX

Certificates and Encryption Convert Formats

openssl pkcs12 -export -out file.pfx -inkey file.key -in file.crt Enter password details when pr...

Updated 1 year ago by 0xBEN

Netcat

File Transfers and Data Exfiltration File Transfer Techniques

Listener on Attack Box File from Target to Attack Box nc -lnvp 53 -q 3 > /tmp/got-the-file Sta...

Updated 1 year ago by 0xBEN

Create Self-Signed TLS Certificates

Certificates and Encryption

When You Should Do This If you have an internal/demo/test server where you'd like to encrypt tra...

Updated 1 year ago by 0xBEN

Disable KWallet Subsystem

Linux Administration KDE Plasma

nano ~/.config/kwalletrc [Wallet] Enabled=false

Updated 1 year ago by 0xBEN

Change Default User Account

Kali Optimizations

Running this on a fresh Kali installation. Login as kali user and run these commands to add a new...

Updated 1 year ago by 0xBEN

Constrain Burp Memory Usage

Web Burp Suite

JVM Options Search for the application and right click "Edit Application" (KDE Plasma pictured...

Updated 1 year ago by 0xBEN

Remote Bloodhound

Active Directory Post Exploitation: Enumeration

Nmap LDAP Enumeration Acquire DC DNS Name sudo nmap -Pn -T4 -p 389,636 --script ldap-rootdse <d...

Updated 1 year ago by 0xBEN

Read TLS Certificate from Server

Certificates and Encryption

OpenSSL openssl s_client -connect 127.0.0.1:443 -servername domain.tld Unix-like operating syst...

Updated 1 year ago by 0xBEN

SMB Relay

Active Directory Initial Attack Vectors: Multipurpose

Note: Network Environment This attack works best in a flat network. However, as long as the atta...

Updated 1 year ago by 0xBEN

NTLM Credential Stuffing

Active Directory Initial Attack Vectors: Multipurpose

NTLM Basic Authentication Could obtain a list of usernames via OSINT, or via something like RI...

Updated 1 year ago by 0xBEN

NULL Session Enumeration

Active Directory Initial Attack Vectors: Multipurpose

NULL Session LDAP, SMB, and RPC may allow a user to authenticate to the service without providin...

Updated 1 year ago by 0xBEN

AS-REP Roasting

Active Directory Initial Attack Vectors: Multipurpose

AS-REP Roasting If Kerberos pre-authentication is disabled on a user account in Active Directory...

Updated 1 year ago by 0xBEN

LLMNR Poisoning

Active Directory Initial Attack Vectors: Local Area Network

Note: Network Environment Given that LLMNR is a name resolution protocol that works on the Local...

Updated 1 year ago by 0xBEN

Debian-Based Distributions

Linux Administration Joining Linux Hosts to Active Directory...

Install Prerequisite Packages # When prompted... # Modify smb.conf to use WINS settings from DH...

Updated 1 year ago by 0xBEN