Search Results

Enable SSH Server Capability Get-WindowsCapability -Online -Name 'OpenSSH.Server*' | Add-WindowsCapability -Online Generate a SSH Key Pair See here for more information: https://notes.benheater.com/books/ssh-administration/page/create-new-key-pair-for-ssh...

Process Overview The basic process to begin brute forcing web logins with Hydra goes like this: Open your web browser Navigate to the target site Open the browser developer toolsOr, configure traffic to go through a HTTP proxy (e.g. Burp Suite) Make a l...

Process Overview The basic process to begin brute forcing web logins with Hydra goes like this: Open your web browser Navigate to the target site Open the browser developer toolsOr, configure traffic to go through a HTTP proxy (e.g. Burp Suite) Make a login a...

Context This assumes that my domain is contoso.org I've generated a *.contoso.org certificate for my Wazuh infrastructure's web interfaces. I have the following DNS records in my environment: wazuh-dashboards.contoso.org owlh-manager.contoso.org My cer...

Install Prerequisite Packages # When prompted... # Modify smb.conf to use WINS settings from DHCP? Answer: Yes sudo apt install -y sssd realmd krb5-user samba-common packagekit* Join the System to the Domain Make sure the conditions are right for the s...

Unprivileged LXC Workaround Overview of the Problem Join Linux Container to the Active Directory domain Cannot SSH into the Linux Container with domain account This is due to domain account's UID and GID assigned by sssd High UID and GID does not fall...

The Big Picture To change the way you attack (and defend) Active Directory networks, change the way you think about Active Directory. What I mean by the above is this...  Focus on the holistic nature of Active Directory as opposed to individual parts Shi...

Active Directory Pentest Types Given the massive attack surface that Active Directory presents, and the fact that I only have an hour or so to present, the objective of the material here is to keep the information within the scope of the PJPT and PNPT. I could...

Usage and Help Display the xfreerdp3 man page man xfreerdp3 Display the xfreerdp3 help output on the console xfreerdp3 -h General Usage Examples # Using hostname or FQDN xfreerdp3 /v:win10ent1.ad.lab /u:'john.doe' /p:'P@$$word123!' # Using an IP ad...

Accompanying Presentation The PJPT Study Group is hosted by my friend and fellow Discord mod, Shawn Szczepkowski (aka @b33f or @b1gb33f) This lesson plan was created for a presentation given to the group by me, Ben Heater. You can find the recording of this ...

Accompanying Presentation The PJPT Study Group is hosted by my friend and fellow Discord mod, Shawn Szczepkowski (aka @b33f or @b1gb33f) This lesson plan was created for a presentation given to the group by me, Ben Heater. You can find the recording of this ...

How it Works We can send a request for a TGT --- without a pre-authentication hash --- to the Kerberos Key Distribution Center (KDC) with specific usernames in the request. If the username is valid, the KDC will prompt us for pre-authentication if required, or...