Search Results

NULL Session LDAP, SMB, and RPC may allow a user to authenticate to the service without providing a credential. Depending on the configurations of these services, you may be able to enumerate a great deal of information about resources on the domain with very...

AS-REP Roasting If Kerberos pre-authentication is disabled on a user account in Active Directory, this will enable an attacker to forge a request for a TGT as this specific user. This is because, pre-authentication -- when enabled -- requires the user to hash...

NTLM Basic Authentication Could obtain a list of usernames via OSINT, or via something like RID cycling from a foothold. Might be able to find a common default credential in a prior breach dump, phishing, or some other reconnaissance The NTLM-authenticate...

Anatomy of a Kerberos Ticket [0;97d82]-2-0-40e10000-t2_felicia.dean@krbtgt-ZA.TRYHACKME.COM.kirbi |_______| ^ |________| |_____________| |_____________________||_____| | | | | | |______file extension ...

Kerberos Encryption Keys Policies on the domain controller will dictate which encryption algorithms can be used by domain-joined hosts. Dump Encryption Keys Mimikatz mimikatz # sekurlsa::ekeys Example Output This host is using the rc4 and aes256 algo...

Downloading Volatility Download the standalone executable based on your operating environment: Linux Mac OS Windows The latest version of Volatility can be downloaded here: https://www.volatilityfoundation.org/releases   Usage Overview Taken from m...

Running this on a fresh Kali installation.  Login as kali user and run these commands to add a new default user: # Specify the username for your new user account username=<your_new_username_here> # Specify that the user login shell will be zsh user_shell=$(wh...

Installing KDE Plasma Official Documentation: https://www.kali.org/docs/general-use/switching-desktop-environments/ Some deviations from the procedure for me: sudo apt remove --purge --allow-remove-essential --auto-remove -y *xfce* lightdm && sudo apt install ...

Auto-Login On Kali side, go to Startup & Shutdown > Login Screen (SDDM) and click Behavior . Set the Automatically log in as <username> setting. Keyboard Shortcuts When pressing keyboard combinations such as CTRL + C and CTRL + V the default NoMachine beh...

Pipe HEREDOC to xargs When creating a HEREDOC, you can use any keyword to denote the start and end of the HEREDOC block. In this case, I used the keyword HEREDOC but any word can be substituted in its place. # -I % indicates the "placeholder" value for the c...

Jump to page: WordPress > Manual Enumeration

Find WordPress NSE Scripts find /usr/share/nmap/scripts -name '*wordpress*' Enumerate WordPress Plugins grep '@args' /usr/share/nmap/scripts/http-wordpress-enum.nse Example scan with arguments, where the base URL for the WordPress installation is at ht...

IP Addressing Common Computer Numbering Systems Binary (base 2) -- 0 to 1 Octal (base 8) -- 0 to 7 Decimal (base 10) -- 0 to 9 Hexadecimal (base 16) -- 0 to F  BASE 10 (0, 1, 2, 3, 4, 5, 6, 7, 8, 9) -------------------------------------- When you...

Media Access Control Address Identifies the physical network interface of a host Hexadecimal addressing: 0-F 48 bits (6 bytes) In early, primitive networks, computers were often on a shared "media" and needed a way to address each other On a sha...

TCP/IP Model vs. OSI Model TCP/IP Model The sender sends from Layer 4 down to Layer 1The recipient receives on Layer 1 up to Layer 4 TCP/IP was developed in the 1970s, and has four layers     |    | S  | E  | N  | D  | E  | R  |    V    4 APPLICATION    ...

Compiled vs Interpreted Languages Example Interpreted (Scripting) Languages Bash JavaScript PowerShell Python Ruby Example Compiled Languages C C++ C# Go Java Rust More Information: Compiler and Interpreter: Compiled Language vs Interpret...

Collections In programming, we use collections to assemble two or more things together Some collections allow you co-mingle data of varying types (e.g. strings mixed in with integers) While other collections require that the data types are all the same S...

Primitive Data Types Byte: 8 bits, 1 byte, raw data Integer Signed: Any negative integer Unsigned: Any non-negative integer (including zero) Short: A signed or unsigned integer with more memory allocation than an integer Long: A signed or unsigne...