Advanced Search
Search Results
312 total results found
Kerberos Authentication
Install Kerberos Client Packages Upon installing, you will see an interactive prompt for information. The answers you provide populate the /etc/krb5.conf file. Production Environments Answer the prompts with the FQDN of the KDC and according to your needs Te...
Kerberos Authentication from Kali
NetExec nxc smb DC01.domain.tld -d 'domain.tld' -u 'username' -p 'P@$$word123!' -k Use a username and password with the -k flag to authenticate using Kerberos KRB5CCNAME='/tmp/john.doe.ccache' nxc smb DC01.domain.tld -d 'domain.tld' -u 'username' -k --use-kca...
Port Knocking
Challenge During target enumeration, you find information that suggests if you port knock the sequence TCP/1000, TCP/2000, TCP/3000, this will open some firewalled ports on the box Solution hping3 # -n : numeric output # -c 1 : 1 packet # -i 1 : wait 1 s...
APK Analysis
APKTool sudo apt install -y apktool apktool d -o decompiled_apk file.apk A good place to start looking for information is in ./decompiled_apk/res/values/strings.xml grep -ilar passw decompiled_apk Recursively search for passw in the output directory; coul...
JAR File Analysis
JAR File Analysis sudo apt install -y jd-gui jadx jd-gui cloudhosting-0.0.1.jar Example: application.properties contains some sensitive data
git-dumper
Python environments are externally managed by apt on Kali Linux, so use pipx or a virtual environment to leave the default environment untouched while working with the git-dumper tool pipx install git-dumper git-dumper http://domain.tld/.git git_loot Output...
Windows RDP Client Custom Resolutions
Setting Custom Resolutions Problem When setting resolutions using the slider, you are limited in the selections you can make, even if the RDP server can support more diverse selections. Solution Determine the Target Resolution Assumes you're using 64-...
Kali LXC: Fixing Slow Desktop Load after KDE Upgrade
Background Following an upgrade to KDE Plasma, whenever I entered user credentials, the KDE splash screen would load, but then it would take about a minute for the desktop environment to load. And even then, once the desktop environment was loaded, when click...
Enumerating SNMP Community Strings
TARGET='TARGET_IP_ADDRESS_HERE' snmpwalk -c public -v1 "$TARGET" . > snmpwalk.txt grep '[^Hex-]STRING' snmpwalk.txt iso.3.6.1.2.1.1.1.0 = STRING: "Linux underpass 5.15.0-126-generic #136-Ubuntu SMP Wed Nov 6 10:38:22 UTC 2024 x86_64" iso.3.6.1.2.1.1.4.0 = ...
Mining Data from Git Repos
Interesting Files The regex patterns found on this page are just some examples you could use to extract data from git repositories. Get creative and build upon these with your own grep regex patterns. cd git_loot find . -type f \( -name '*config*' -o -name ...
Alternative Network Scans
Generate Target List Linux ip="10.9.9.0"; cidr=24; IFS=. read -r i1 i2 i3 i4 <<< "$ip"; raw=$(( (1 << (32 - cidr)) - 2 )); base_ip=$(( (i1<<24) + (i2<<16) + (i3<<8) + i4 )); network=$(( base_ip & (0xFFFFFFFF << (32 - cidr)) )); for i in $(seq 1 $raw); do ip_ca...
Install Ghauri on Kali Linux
Installation Python environment is managed by apt on Kali Linux, use pipx or a virtual environment to install the required packages pipx install git+https://github.com/r0oth3x49/ghauri.git pipx ensurepath This ensures you can load pipx packages using the P...
Manual Testing with cURL
Multipart Forms This form expects the following fields: cat_name : text age : number birthdate : date weight : number cat_photo : file The curl command to submit this form: # -X POST is redundant here, as -F implies this # Can specify a content type in the...
Allow Multicast Traffic Across VLANs
Scenario You have multiple VLANs firewalled to segment your network. One such VLAN is an IOT VLAN, where any device considered to be an IOT device is a member of this VLAN. In this VLAN, you have some Google products to which you wish to cast / stream audiovis...
PowerShell: Find File Download Source
# Recursively search current user's Downloads directory Get-ChildItem -Recurse -File "$env:UserProfile\Downloads\" | ForEach-Object { $file = $_ # Get all data streams of the file $item = Get-Item $file.FullName -Stream * if ($item.Stream -conta...
PowerShell: Find File Download Source
Convert PFX to PEM
Output Combined Data openssl pkcs12 -nodes -in file.pfx -out file.pem Key and certificate combined in single file Output Key and Certificate openssl pkcs12 -nodes -in file.pfx -nocerts -out star.contoso.org.key Extract the Private Key openssl pkcs12 -c...
Read X.509 Data from Certificate File
openssl x509 -in cert.pem -text -noout