Recently Updated Pages
SMB Relay
Note: Network Environment This attack works best in a flat network. However, as long as the atta...
NTLM Credential Stuffing
NTLM Basic Authentication Could obtain a list of usernames via OSINT, or via something like RI...
NULL Session Enumeration
NULL Session LDAP, SMB, and RPC may allow a user to authenticate to the service without providin...
AS-REP Roasting
AS-REP Roasting If Kerberos pre-authentication is disabled on a user account in Active Directory...
LLMNR Poisoning
Note: Network Environment Given that LLMNR is a name resolution protocol that works on the Local...
Debian-Based Distributions
Install Prerequisite Packages # When prompted... # Modify smb.conf to use WINS settings from DH...
git-dumper
Python environments are externally managed by apt on Kali Linux, so use pipx or a virtual environ...
Unattended Upgrades (Debian Derivative)
This is going to be more of a tl;dr version of my write-up here Install and Configure sudo apt ...
FTP
Attack Box Running FTP Server sudo apt install -y python3-pyftpdlib # Show help message sudo p...
Find and Restore Items in RecycleBin
Find Items Get-ChildItem -Force -File -Recurse 'C:\$RECYCLE.BIN' Restore Items $Shell = New-...
Setting Directory and File ACLs
PowerShell $targetFile = "C:\Users\Public\Desktop\bin.exe" $acl = Get-Acl $targetFile $rule = ...
Install Ghauri on Kali Linux
Installation Python environment is managed by apt on Kali Linux, use pipx or a virtual environme...
Mining Data from Git Repos
Interesting Files The regex patterns found on this page are just some examples you could use to ...
Computer Programming: Collections, Loops, and Conditions
Collections In programming, we use collections to assemble two or more things together Some c...
Computer Programming: Primitive Data Types
Primitive Data Types Byte: 8 bits, 1 byte, raw data Integer Signed: Any negative integer ...
Read X.509 Data from Certificate File
openssl x509 -in cert.pem -text -noout
List Nmap Top Ports
Purpose If you're running a lengthy nmap scan and do not want to enumerate all 65,535 TCP (or UD...
Brute Force HTTP Basic Authentication with Hydra
Process Overview The basic process to begin brute forcing web logins with Hydra goes like this: ...
PowerShell: Find File Download Source
# Recursively search current user's Downloads directory Get-ChildItem -Recurse -File "$env:UserP...