Skip to main content
Advanced Search
Search Terms
Content Type

Exact Matches
Tag Searches
Date Options
Updated after
Updated before
Created after
Created before

Search Results

216 total results found

Windows: Unattended Sleep Timeout

Windows Administration

Problem A Windows guest running under the Proxmox hypervisor repeatedly powers off despite having the display and sleep settings set to Never .  Solution Open a PowerShell prompt as administrator and run the following command to expose a the System Unatte...

NFS: LXC Permissions Issue (Synology)

Proxmox vzdump Backups

This article pertains to vzdump backups and is here for archiving. I have a chapter on Proxmox Backup Server here. The Issue INFO: starting new backup job: vzdump 204 --remove 0 --compress zstd --mode snapshot --storage Backups --notes-template '{{node}} - {{v...

Create New Key Pair for SSH

SSH Administration

Create the Key Pair -C "" : No comment on the public key string -f "~/my_ssh_key" : Output in the current user's home folder and use the base name as my_ssy_key my_ssh_key : private key file Never share this my_ssh_key.pub : public key file Add this to a...

Create Self-Signed TLS Certificates

Certificates and Encryption

When You Should Do This If you have an internal/demo/test server where you'd like to encrypt traffic between a client and server, you can create a self-signed certificate. This is not good practice for production servers. Whenever possible, you should request...

XRDP Server on KDE Plasma

Linux Administration Remote Desktop Solutions

Install and Configure XRDP # Install xRDP server sudo apt update && sudo apt install -y xrdp dbus-x11 # Add self-signed certificate sudo rm /etc/xrdp/cert.pem /etc/xrdp/key.pem sudo openssl req -new -newkey rsa:4096 -x509 -sha256 -days 3650 -nodes -out /etc/xr...

Troubleshooting

Fleet DM FleetDM On Debian 11

Hosts Enrolling with Empty Data In my testing, the way to reproduce the issue is: Remove a host using the Fleet UI The host should automatically re-enroll after a short time as pulses regularly check-in with the Fleet DM server When the endpoint auto...

IMAP

Mail Mapping Mailboxes with Mutt

Create the Config File nano ./username-muttrc You should only need to change the username, password, and domain.tld entries to their respective values according to your user authentication information. set my_mailproto="imap" set my_mailuser="username" se...

POP3

Mail Mapping Mailboxes with Mutt

Create the Config File nano ./username-muttrc You should only need to change the username, password, and domain.tld entries to their respective values according to your user authentication information. set my_mailproto="pop" set my_mailuser="username" set...

Configuring 802.1q VLANs

Computer Networking

Network Diagram VLAN IDs and their IP blocks do not need to align (e.g. VLAN 10 = 10.10.10.0/24 or VLAN 100 = 10.100.100.0/24), I've only done this to make it easy to remember. . ``````` . ," ^ ", : | ...

Have I Helped You Today?

The goal of this blog is to share technical and educational content that is: Well-documented Easy-to-read Free and open And do so without the need to rely on intrusive advertisements. I would be immensely grateful if you would consider contributing ev...

Multipart Forms and Boundary Parameters

Web Web Protocols

Multipart/Form-Data Example Example Web Form Consider the following web form... File Upload Form HTML <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> ...

PowerShell: Adding Registry Hives

Windows Administration PowerShell

Get-PSDrive -PSProvider Registry Name Used (GB) Free (GB) Provider Root CurrentLocation ---- --------- --------- -------- ---...

NULL Session Enumeration

Active Directory Initial Attack Vectors: Multipurpose

NULL Session LDAP, SMB, and RPC may allow a user to authenticate to the service without providing a credential. Depending on the configurations of these services, you may be able to enumerate a great deal of information about resources on the domain with very...

AS-REP Roasting

Active Directory Initial Attack Vectors: Multipurpose

AS-REP Roasting If Kerberos pre-authentication is disabled on a user account in Active Directory, this will enable an attacker to forge a request for a TGT as this specific user. This is because, pre-authentication -- when enabled -- requires the user to hash...

NTLM Credential Stuffing

Active Directory Initial Attack Vectors: Multipurpose

NTLM Basic Authentication Could obtain a list of usernames via OSINT, or via something like RID cycling from a foothold. Might be able to find a common default credential in a prior breach dump, phishing, or some other reconnaissance The NTLM-authenticate...

Pass the Ticket

Active Directory Post Exploitation: Attacks

Anatomy of a Kerberos Ticket [0;97d82]-2-0-40e10000-t2_felicia.dean@krbtgt-ZA.TRYHACKME.COM.kirbi |_______| ^ |________| |_____________| |_____________________||_____| | | | | | |______file extension ...

Pass the Key

Active Directory Post Exploitation: Attacks

Kerberos Encryption Keys Policies on the domain controller will dictate which encryption algorithms can be used by domain-joined hosts. Dump Encryption Keys Mimikatz mimikatz # sekurlsa::ekeys Example Output This host is using the rc4 and aes256 algo...

Volatility

Memory Forensics

Downloading Volatility Download the standalone executable based on your operating environment: Linux Mac OS Windows The latest version of Volatility can be downloaded here: https://www.volatilityfoundation.org/releases   Usage Overview Taken from m...