ATTACK – Page 3 – NetwerkLABS

PowerView Cheat Sheet

up-to-date version of PowerView: https://github.com/PowerShellMafia/PowerSploit/blob/dev/Recon/PowerView.ps1 New function naming schema: Verbs: Get : retrieve full raw data sets Find : ‘find’ specific data entries in a data set Add : add a new object to a destination…

Bharath Narayanasamy

Attacking Active Directory

Attacking Kerberos

Kerberos Kerberos is the default authentication service for Microsoft Windows domains. It is intended to be more "secure" than NTLM by using third party ticket authorization as well as stronger encryption. Even though NTLM has a…

Bharath Narayanasamy kerberos, AD attacks

Practical LABS

TryHackMe: OpenVPN Issues and Fixes

OpenVPN complaining of depreciated ciphers ERROR: failed to negotiate cipher with server. Add the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305') if you want to connect to this server. Fix: sed -i 's/cipher AES-256-CBC/data-ciphers AES-256-CBC/' *.ovpn

Bharath Narayanasamy

VulnLAB

OpenCTI

OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. OpenCTI is designed to provide organizations with the means to manage CTI through the storage, analysis, visualization and presentation of threat campaigns, malware…

Bharath Narayanasamy Threat Intel, BLUE

PenTest

How to Brute Force Websites with Hydra

Bharath Narayanasamy hydra, brute-force

PrivEsc

Linux Privilege Escalation Techniques

Linux privilege escalation techniques involve methods that allow a user to gain higher privileges or escalate their existing privileges to gain unauthorized access or perform actions they wouldn't typically be allowed to do. It's important to…

Bharath Narayanasamy Linux privesc

PrivEsc

Privilege Escalation – WINDOWS

Post Exploit Enumeration # Basics systeminfo hostname systeminfo | findstr /B /C:"OS Name" /C:"OS Version" # Who am I? whoami echo %username% # What users/localgroups are on the machine? net users net localgroups net local groups…

Bharath Narayanasamy Windows PrivEsc

Enumeration

CrackMapExec Cheat Sheet

Bharath Narayanasamy crackmapexec

VulnLAB Practical LABS

VulnHUB PwnBox-init: Walkthrough

Lab setup Enumeration Nmap scan └─$ nmap -sC -sV -p- -A -T5 172.16.1.116 -oN pwnbox.txt Starting Nmap 7.93 ( https://nmap.org ) at 2023-05-01 16:21 CEST Nmap scan report for 172.16.1.116 Host is up (0.00064s latency). Not…

Bharath Narayanasamy vulnhub, PwnBox

PrivEsc

Linux Privilege Escalation: The PATH Environment Variable (PATH Abuse)

LAB setup Attack Box: KALI Linux or ParrotOS Victim machine: VulnHUB VM: OS-Bytesec Initial Access Read this article to learn how to gain initial access to the victim machine. SSH User: blackjax Password: snowflake Port :…

Bharath Narayanasamy