Recently Updated Pages
Kali LXC: Fixing Slow Desktop Load after KDE Upgrade
Background Following an upgrade to KDE Plasma, whenever I entered user credentials, the KDE spla...
Windows RDP Client Custom Resolutions
Setting Custom Resolutions Problem When setting resolutions using the slider, you are limited i...
JAR File Analysis
JAR File Analysis sudo apt install -y jd-gui jadx jd-gui cloudhosting-0.0.1.jar Example: a...
John the Ripper Help Tricks
Find Hash Format Modules Find supported hash types # Field 1 is the Format label # Field 7 is ...
Generate Hashes Passwd Overwrite
SALT=$(openssl rand -base64 6) # Salted MD5 openssl passwd -1 -salt $SALT your_password # Salt...
OpenSSH Server on Windows Hosts
Enable SSH Server Capability Get-WindowsCapability -Online -Name 'OpenSSH.Server*' | Add-Windows...
Token Impersonation
Overview Tokens are temporary keys that allow a user to perform actions on a system or network w...
Group Policy Preferences (GPP)
Overview GPP allows admins to create policies with embedded credentials. The credentials are enc...
PrintNightmare
Local Privilege Escalation https://github.com/calebstewart/CVE-2021-1675
Mimikatz
Overview https://github.com/gentilkiwi/mimikatz There are various spin-offs of the Mimikatz pro...
ZeroLogon
Caution This can potentially break a domain controller, due the fact that this attack temporaril...
Enum4Linux
Details Enum4linux is a tool for enumerating information from Windows and Samba systems. It at...
LdapDomainDump
When to Use You'll know when you've found a domain controller, because it will have ...
PowerShell AD Module on Any Domain Host as Any User
Borrow a DLL Normally, one must install RSAT (Remote Server Administration Tools) on a host to m...
Alternate Information Gathering Methods
Current User Example would be if you have LFI or some other means to read from the local file sy...
Dynamic Word Lists with Maskprocessor
Project Github https://github.com/hashcat/maskprocessor Example Usage You have a base pass...
Have I Helped You Today?
The goal of this blog is to share technical and educational content that is: Well-documented ...
WinRM (PowerShell Remoting)
WinRM runs on TCP port 5985 for unencrypted sessions and 5986 for encrypted sessions. # Open a P...
TFTP
If the target has a TFTP client installed, Metasploit has a TFTP server you can run ad-hoc on you...
SCP
SCP Syntax Review The most fundamental syntax for using scp is this: # Password Authentication ...