ATTACK – Page 2 – NetwerkLABS

Shodan 101

Shodan is a search engine for Internet-connected devices.It lets users search for various types of servers (webcams, routers, servers, etc.) connected to the internet using a variety of filters.Some have also described it as a search…

Bharath Narayanasamy osint, shodan

VulnLAB

Test Page

This is a test page to check migration status.

Bharath Narayanasamy

VulnLAB CyBER Tools

Incident Response

Incident response, also known as incident handling, is a cyber security function that uses various methodologies, tools and techniques to detect and manage adversarial attacks while minimizing impact, recovery time and total operating costs. Addressing attacks…

Bharath Narayanasamy dfir, IR, Incident

Attacking Active Directory

GOAD v2 Installation

Game Of Active Directory The following steps explain the procedure to setup the GOADv2 LAB environment to pentest Active Directory. Warning This lab is extremely vulnerable, do not reuse recipe to build your environment and do not…

Bharath Narayanasamy AD, AD²

PenTest

Intro to Practical Enterprise Pentesting

Stages Pre-Engagement Information Gathering Vulnerability Assessment Exploitation Post-Exploitation Lateral Movement Proof of Concept Post-Engagement

Bharath Narayanasamy pentest

Attacking Active Directory

AD Attacks & Tools Timeline

Bharath Narayanasamy AD attacks

Attacking Active Directory

AD Fundamentals

Ransomware operators have been increasingly targeting Active Directory as a key part of their attack paths. The Conti Ransomware which has been used in more than 400 attacks around the world has been shown to leverage recent critical…

Bharath Narayanasamy AD

Attacking Active Directory

Breaching AD

Active Directory (AD) is used by approximately 90% of the Global Fortune 1000 companies. If an organisation's estate uses Microsoft Windows, you are almost guaranteed to find AD. Microsoft AD is the dominant suite used to…

Bharath Narayanasamy Active Directory, AD attacks

Brute Force Attacks

Login Brute Forcing

Where to find the passwords/hashes WindowsLinuxunattend.xmlshadowsysprep.infshadow.bakSAMpassword Types of Password Attacks Dictionary attackBrute forceTraffic interceptionMan In the MiddleKey LoggingSocial engineering

Bharath Narayanasamy brute-force, ncrack, hydra

Attacking Active Directory

Understanding Kerberos Authentication

Kerberos Authentication Referenceshttps://www.youtube.com/watch?v=snGeZlDQL2Q https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-kile/b4af186e-b2ff-43f9-b18e-eedb366abf13 krbtgt account -→ KDC Service Account Ticket Details Authorization Data is Microsoft addition to Kerberos; can be manipulated to modify Group membership..etc and launch attacks. Domian Policy about Kerberos settings (default): The…

Bharath Narayanasamy