Skip to main content

Recently Updated Pages

FFUF

Web Brute Force & Fuzzing

Brute Force Logins Brute Force with a Request File Start Burp Make a randomized login to the...

Updated 1 year ago by 0xBEN

Gobuster

Web Brute Force & Fuzzing

Virtual Host Enumeration You can find a more detailed analysis on the functionality of virtual h...

Updated 1 year ago by 0xBEN

Linux Remote Desktop Client

Active Directory Post Exploitation: Attacks

Usage and Help Display the xfreerdp3 man page man xfreerdp3 Display the xfreerdp3 help output ...

Updated 1 year ago by 0xBEN

Using Pyenv to Manage Python Environments

Computer Programming Python

sudo apt install pyenv pyenv init Sample output, run locally and append lines as described to...

Updated 1 year ago by 0xBEN

apt: List Package Dependencies and Files

Linux Administration Package Managers

Problem On Debian based systems, apt acts as a wrapper around dpkg to manage dependencies and co...

Updated 1 year ago by 0xBEN

Convert PFX to PEM

Certificates and Encryption Convert Formats

Output Combined Data openssl pkcs12 -nodes -in file.pfx -out file.pem Key and certificate combi...

Updated 1 year ago by 0xBEN

LdapModify

Active Directory Post Exploitation: Attacks

When to Use You'll know when you've found a domain controller, because it will have several port...

Updated 1 year ago by 0xBEN

apt: Find Application Source Package

Linux Administration Package Managers

Problem On Debian based systems, apt acts as a wrapper around dpkg to manage dependencies and co...

Updated 1 year ago by 0xBEN

Dumping DNS Records with adidnsdump

Active Directory Post Exploitation: Enumeration

Active Directory Integrated DNS Dump (adidnsdump) GitHub Repository Installation pipx install ...

Updated 1 year ago by 0xBEN

Passback Attacks

Active Directory Initial Attack Vectors: Multipurpose

What's the Flaw? Usually involves an unsecure device -- like a printer or multifunction device -...

Updated 1 year ago by 0xBEN

Pass the Ticket

Active Directory Post Exploitation: Attacks

Anatomy of a Kerberos Ticket [0;97d82]-2-0-40e10000-t2_felicia.dean@krbtgt-ZA.TRYHACKME.COM.kirb...

Updated 1 year ago by 0xBEN

Computer Networking: IP Addressing and Subnetting

PJPT & PNPT Study Group Lessons Session 2: Nov. 13, 2023

IP Addressing Common Computer Numbering Systems Binary (base 2) -- 0 to 1 Octal (base 8) -- ...

Updated 1 year ago by 0xBEN

Nmap Scanning with Categories

Nmap

Example 1: Nmap script scan with categories Categories https://nmap.org/book/nse-usage.html#n...

Updated 1 year ago by 0xBEN

Enumerating NFS

Nmap

General Information portmapper and rpcbind run on TCP 111 rpcbind maps RPC services to their ...

Updated 1 year ago by 0xBEN

Convert Certificate and Key to PFX

Certificates and Encryption Convert Formats

openssl pkcs12 -export -out file.pfx -inkey file.key -in file.crt Enter password details when pr...

Updated 1 year ago by 0xBEN

Netcat

File Transfers and Data Exfiltration File Transfer Techniques

Listener on Attack Box File from Target to Attack Box nc -lnvp 53 -q 3 > /tmp/got-the-file Sta...

Updated 1 year ago by 0xBEN

Create Self-Signed TLS Certificates

Certificates and Encryption

When You Should Do This If you have an internal/demo/test server where you'd like to encrypt tra...

Updated 1 year ago by 0xBEN

Disable KWallet Subsystem

Linux Administration KDE Plasma

nano ~/.config/kwalletrc [Wallet] Enabled=false

Updated 1 year ago by 0xBEN

Constrain Burp Memory Usage

Web Burp Suite

JVM Options Search for the application and right click "Edit Application" (KDE Plasma pictured...

Updated 1 year ago by 0xBEN

Read TLS Certificate from Server

Certificates and Encryption

OpenSSL openssl s_client -connect 127.0.0.1:443 -servername domain.tld Unix-like operating syst...

Updated 1 year ago by 0xBEN