Skip to main content

Recently Updated Pages

SMB Relay

Active Directory Initial Attack Vectors: Multipurpose

Note: Network Environment This attack works best in a flat network. However, as long as the atta...

Updated 1 year ago by 0xBEN

NTLM Credential Stuffing

Active Directory Initial Attack Vectors: Multipurpose

NTLM Basic Authentication Could obtain a list of usernames via OSINT, or via something like RI...

Updated 1 year ago by 0xBEN

NULL Session Enumeration

Active Directory Initial Attack Vectors: Multipurpose

NULL Session LDAP, SMB, and RPC may allow a user to authenticate to the service without providin...

Updated 1 year ago by 0xBEN

AS-REP Roasting

Active Directory Initial Attack Vectors: Multipurpose

AS-REP Roasting If Kerberos pre-authentication is disabled on a user account in Active Directory...

Updated 1 year ago by 0xBEN

LLMNR Poisoning

Active Directory Initial Attack Vectors: Local Area Network

Note: Network Environment Given that LLMNR is a name resolution protocol that works on the Local...

Updated 1 year ago by 0xBEN

Debian-Based Distributions

Linux Administration Joining Linux Hosts to Active Directory...

Install Prerequisite Packages # When prompted... # Modify smb.conf to use WINS settings from DH...

Updated 1 year ago by 0xBEN

git-dumper

Web Dumping Open Git Repos

Python environments are externally managed by apt on Kali Linux, so use pipx or a virtual environ...

Updated 1 year ago by 0xBEN

Unattended Upgrades (Debian Derivative)

Linux Administration Automatic Updates

This is going to be more of a tl;dr version of my write-up here Install and Configure sudo apt ...

Updated 1 year ago by 0xBEN

FTP

File Transfers and Data Exfiltration File Transfer Techniques

Attack Box Running FTP Server sudo apt install -y python3-pyftpdlib # Show help message sudo p...

Updated 1 year ago by 0xBEN

Find and Restore Items in RecycleBin

Windows Administration

Find Items Get-ChildItem -Force -File -Recurse 'C:\$RECYCLE.BIN' Restore Items $Shell = New-...

Updated 1 year ago by 0xBEN

Setting Directory and File ACLs

Windows Administration

PowerShell $targetFile = "C:\Users\Public\Desktop\bin.exe" $acl = Get-Acl $targetFile $rule = ...

Updated 1 year ago by 0xBEN

Install Ghauri on Kali Linux

Web SQL Injection

Installation Python environment is managed by apt on Kali Linux, use pipx or a virtual environme...

Updated 1 year ago by 0xBEN

Mining Data from Git Repos

Web Dumping Open Git Repos

Interesting Files The regex patterns found on this page are just some examples you could use to ...

Updated 1 year ago by 0xBEN

Computer Programming: Collections, Loops, and Conditions

PJPT & PNPT Study Group Lessons Session 2: Nov. 13, 2023

Collections In programming, we use collections to assemble two or more things together Some c...

Updated 1 year ago by 0xBEN

Computer Programming: Primitive Data Types

PJPT & PNPT Study Group Lessons Session 2: Nov. 13, 2023

Primitive Data Types Byte: 8 bits, 1 byte, raw data Integer Signed: Any negative integer ...

Updated 1 year ago by 0xBEN

Read X.509 Data from Certificate File

Certificates and Encryption

openssl x509 -in cert.pem -text -noout  

Updated 1 year ago by 0xBEN

List Nmap Top Ports

Nmap

Purpose If you're running a lengthy nmap scan and do not want to enumerate all 65,535 TCP (or UD...

Updated 1 year ago by 0xBEN

Brute Force HTTP Basic Authentication with Hydra

Hydra Brute Force Web Logins with Hydra

Process Overview The basic process to begin brute forcing web logins with Hydra goes like this: ...

Updated 1 year ago by 0xBEN

PowerShell: Find File Download Source

Windows Administration PowerShell

# Recursively search current user's Downloads directory Get-ChildItem -Recurse -File "$env:UserP...

Updated 1 year ago by 0xBEN

PowerShell: Find File Download Source

Windows PowerShell

Updated 1 year ago by 0xBEN