microsoft
DCSync is a powerful tool in the hands of a red teamer and a nightmare for Blue teamers. For the blue teamer all is not lost. This type of attack may not be feasible to stop but it can be detected. Abstract Here I will show how you can quickly
Effective password management is important for protecting your personal information and accounts from unauthorized access. Here are some best practices for password management: 1. Use strong passwords: Strong passwords are long and contain a mix of upper and lower case letters, numbers, and special characters. Avoid using easily guessable passwords
wireless
Table of Contents 1. Prerequisites 2. Capture 1. Step 1: Monitor 2. Step 2: Packet Capture 3. Step 3: De-authenticate 3. Carck 1. Step 1: Edit john.conf 2. Step 2: Create A Word List 3. Step 3: Create A Database 4. Step 4: Start Cracking Every craftsman knows that
HTB
As I learn about reverse engineering and hacking, I find myself repeating certain steps. When working on the network, I start with Nmap and when reverse engineering I start with file. file baby | tr "," "\n" The next thing I did was execute the file. $ ./baby Insert
microsoft
This tutorial will cover how to add Eternalblue-Doublepulsar to Metasploit framework on any Debian based distro. As well as run the Fuzzbunch framework through wine. Prerequisites * Debian based distro * Metasploit * Wine * Eternalbule-doublepulsar Step 1: Will the target fall victim? We will want to check to see if the target victim
wireless
Setting up a secure wireless home network is important because it helps protect your personal information and devices from being accessed by others. Here are some steps you can follow to set up a secure wireless home network: 1. Choose a strong password: Choose a strong, unique password for your
cve
Having been asked to look into CVE-2020-0601 for work, I thought I'd share what I learned. What is it? It is a flaw in the way Microsoft was validating Elliptic Curve Cryptography (ECC) certificates. This flaw affected all ECC certificates, including Microsofts own ECC MicrosoftECCProductRootCertificateAuthority.cer. Why this
microsoft
Fuzzbunch is a framework like Metasploit however it was written for Windows XP and who wants to use that. This tutorial will cover how to get it up and running on a Debian based distro. Prerequisites * Debian based distro * Wine * fuzzbunch-debian Step 1: The first thing we need to do
ssh
In this tutorial we will secure SSH by disabling root logon and logon with a password. Prerequisites I will be using two Ubuntu vagrant machines however this should work on most systems with SSH. Keep in mind the paths and files may differ across different systems. Step 1: Create RSA
sudo
In this tutorial we will secure Sudo by enabling logging. Giving us the ability to replay a users session. Prerequisites I will be using Ubuntu however this should work on most systems with sudo. Keep in mind the paths and files may differ across different systems. Enable SUDO Logging There
microsoft
Detecting Pass-The-Ticket and Pass-The-Hash Attack Using Simple WMI Commands Reading this I wanted to follow along but there was some things left out. I like reproducability and wanted to reproduce the resaults. This artical starts out realy well. The first few paragraphs go over the issue I am having. PTH
ssh
Introduction This tutorial will teach you how to write a Python script using Paramiko to bruit force SSH. I will start by showing you how to make a connection, send input and receive output, and finish with brute forcing. In this tutorial I will be attacking Metasploitable and I recommend