Advanced Search
Search Results
216 total results found
Windows: Unattended Sleep Timeout
Problem A Windows guest running under the Proxmox hypervisor repeatedly powers off despite having the display and sleep settings set to Never . Solution Open a PowerShell prompt as administrator and run the following command to expose a the System Unatte...
NFS: LXC Permissions Issue (Synology)
This article pertains to vzdump backups and is here for archiving. I have a chapter on Proxmox Backup Server here. The Issue INFO: starting new backup job: vzdump 204 --remove 0 --compress zstd --mode snapshot --storage Backups --notes-template '{{node}} - {{v...
Create New Key Pair for SSH
Create the Key Pair -C "" : No comment on the public key string -f "~/my_ssh_key" : Output in the current user's home folder and use the base name as my_ssy_key my_ssh_key : private key file Never share this my_ssh_key.pub : public key file Add this to a...
Create Self-Signed TLS Certificates
When You Should Do This If you have an internal/demo/test server where you'd like to encrypt traffic between a client and server, you can create a self-signed certificate. This is not good practice for production servers. Whenever possible, you should request...
XRDP Server on KDE Plasma
Install and Configure XRDP # Install xRDP server sudo apt update && sudo apt install -y xrdp dbus-x11 # Add self-signed certificate sudo rm /etc/xrdp/cert.pem /etc/xrdp/key.pem sudo openssl req -new -newkey rsa:4096 -x509 -sha256 -days 3650 -nodes -out /etc/xr...
Troubleshooting
Hosts Enrolling with Empty Data In my testing, the way to reproduce the issue is: Remove a host using the Fleet UI The host should automatically re-enroll after a short time as pulses regularly check-in with the Fleet DM server When the endpoint auto...
IMAP
Create the Config File nano ./username-muttrc You should only need to change the username, password, and domain.tld entries to their respective values according to your user authentication information. set my_mailproto="imap" set my_mailuser="username" se...
POP3
Create the Config File nano ./username-muttrc You should only need to change the username, password, and domain.tld entries to their respective values according to your user authentication information. set my_mailproto="pop" set my_mailuser="username" set...
Configuring 802.1q VLANs
Network Diagram VLAN IDs and their IP blocks do not need to align (e.g. VLAN 10 = 10.10.10.0/24 or VLAN 100 = 10.100.100.0/24), I've only done this to make it easy to remember. . ``````` . ," ^ ", : | ...
Have I Helped You Today?
The goal of this blog is to share technical and educational content that is: Well-documented Easy-to-read Free and open And do so without the need to rely on intrusive advertisements. I would be immensely grateful if you would consider contributing ev...
Multipart Forms and Boundary Parameters
Multipart/Form-Data Example Example Web Form Consider the following web form... File Upload Form HTML <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> ...
PowerShell: Adding Registry Hives
Get-PSDrive -PSProvider Registry Name Used (GB) Free (GB) Provider Root CurrentLocation ---- --------- --------- -------- ---...
NULL Session Enumeration
NULL Session LDAP, SMB, and RPC may allow a user to authenticate to the service without providing a credential. Depending on the configurations of these services, you may be able to enumerate a great deal of information about resources on the domain with very...
AS-REP Roasting
AS-REP Roasting If Kerberos pre-authentication is disabled on a user account in Active Directory, this will enable an attacker to forge a request for a TGT as this specific user. This is because, pre-authentication -- when enabled -- requires the user to hash...
NTLM Credential Stuffing
NTLM Basic Authentication Could obtain a list of usernames via OSINT, or via something like RID cycling from a foothold. Might be able to find a common default credential in a prior breach dump, phishing, or some other reconnaissance The NTLM-authenticate...
Pass the Ticket
Anatomy of a Kerberos Ticket [0;97d82]-2-0-40e10000-t2_felicia.dean@krbtgt-ZA.TRYHACKME.COM.kirbi |_______| ^ |________| |_____________| |_____________________||_____| | | | | | |______file extension ...
Pass the Key
Kerberos Encryption Keys Policies on the domain controller will dictate which encryption algorithms can be used by domain-joined hosts. Dump Encryption Keys Mimikatz mimikatz # sekurlsa::ekeys Example Output This host is using the rc4 and aes256 algo...
Volatility
Downloading Volatility Download the standalone executable based on your operating environment: Linux Mac OS Windows The latest version of Volatility can be downloaded here: https://www.volatilityfoundation.org/releases Usage Overview Taken from m...