Recently Updated Pages
John the Ripper Help Tricks
Find Hash Format Modules Find supported hash types # Field 1 is the Format label # Field 7 is ...
Generate Hashes Passwd Overwrite
SALT=$(openssl rand -base64 6) # Salted MD5 openssl passwd -1 -salt $SALT your_password # Salt...
OpenSSH Server on Windows Hosts
Enable SSH Server Capability Get-WindowsCapability -Online -Name 'OpenSSH.Server*' | Add-Windows...
Token Impersonation
Overview Tokens are temporary keys that allow a user to perform actions on a system or network w...
Group Policy Preferences (GPP)
Overview GPP allows admins to create policies with embedded credentials. The credentials are enc...
PrintNightmare
Local Privilege Escalation https://github.com/calebstewart/CVE-2021-1675
Mimikatz
Overview https://github.com/gentilkiwi/mimikatz There are various spin-offs of the Mimikatz pro...
ZeroLogon
Caution This can potentially break a domain controller, due the fact that this attack temporaril...
Enum4Linux
Details Enum4linux is a tool for enumerating information from Windows and Samba systems. It at...
LdapDomainDump
When to Use You'll know when you've found a domain controller, because it will have ...
PowerShell AD Module on Any Domain Host as Any User
Borrow a DLL Normally, one must install RSAT (Remote Server Administration Tools) on a host to m...
Alternate Information Gathering Methods
Current User Example would be if you have LFI or some other means to read from the local file sy...
Dynamic Word Lists with Maskprocessor
Project Github https://github.com/hashcat/maskprocessor Example Usage You have a base pass...
Have I Helped You Today?
The goal of this blog is to share technical and educational content that is: Well-documented ...
WinRM (PowerShell Remoting)
WinRM runs on TCP port 5985 for unencrypted sessions and 5986 for encrypted sessions. # Open a P...
TFTP
If the target has a TFTP client installed, Metasploit has a TFTP server you can run ad-hoc on you...
SOCAT
Listener on Attack Box # Start a listener on the attack box and create a file when received soc...
SCP
SCP Syntax Review The most fundamental syntax for using scp is this: # Password Authentication ...
Multipart Forms and Boundary Parameters
Multipart/Form-Data Example Example Web Form Consider the following web form... File Uploa...
Using an Ad-Hoc Python Web Server to Catch HTTP Client Requests
nano serv.py import http.server bind_address='0.0.0.0' port=80 class CustomRequestHandl...