NEW BOT Телеграм, страница

Network Penetration Testing

حملات به Azure AD و موارد دیگر ...

https://www.inversecos.com/2021/10/attacks-on-azure-ad-and-m365-pawning.html

#Attack
#Azure
#Ad
#Cloud
#Microsoft

@NetPentester

78 viewsedited 10:01

Network Penetration Testing

نظارت امنیتی در سراسر Azure Ad و Active Directory

https://github.com/Cloud-Architekt/AzureAD-Attack-Defense/blob/main/IdentitySecurityMonitoring.md

#Azure
#ad

@NetPentester

85 viewsedited 09:27

Network Penetration Testing

Pre-Auth SSRF To Full MailBox Access
(Microsoft Exchange Server Exploit)

https://vanshal.medium.com/pre-auth-ssrf-to-full-mailbox-access-microsoft-exchange-server-exploit-a62c8ac04b47

#SSRF
#Microsoft
#exchange

@NetPentester

77 viewsedited 05:47

Network Penetration Testing

پیاده سازی پایتون برای سوء استفاده از گواهی Active Directory

https://github.com/ollypwn/Certipy

#python
#Ad

@NetPentester

87 viewsedited 05:52

Network Penetration Testing

PowerShell Red Team Enum.

مجموعه توابع PowerShell که Red Teamer ممکن است برای جمع آوری داده ها از دستگاه یا دسترسی به هدف استفاده کند. فایلهای ps1 را برای دستوراتی که در ماژول RedTeamEnum موجود است اضافه کردم. این به شما این امکان را می دهد که به راحتی تنها یک دستور را پیدا کرده و از آن استفاده کنید. اگر می خواهید کل ماژول پس از بارگیری فهرست و محتویات RedTeamEnum در دستگاه خود ، اقدامات زیر را انجام دهید.

https://github.com/tobor88/PowerShell-Red-Team

#powershell

@NetPentester

GitHub

GitHub - tobor88/PowerShell-Red-Team: Collection of PowerShell functions a Red Teamer may use in an engagement

Collection of PowerShell functions a Red Teamer may use in an engagement - tobor88/PowerShell-Red-Team

78 viewsedited 18:32

Network Penetration Testing

Azure Privilege Escalation via Service Principal Abuse

https://posts.specterops.io/azure-privilege-escalation-via-service-principal-abuse-210ae2be2a5

#Azure
#privilege

@NetPentester

SpecterOps

Blog - SpecterOps

Your new best friend: Introducing BloodHound Community Edition!

74 viewsedited 06:36

Network Penetration Testing

ProxyToken (CVE-2021-33766) : An Authentication Bypass in Microsoft Exchange Server POC exploit

https://github.com/bhdresh/CVE-2021-33766

#exchange
#bypass

@NetPentester

GitHub

GitHub - bhdresh/CVE-2021-33766: ProxyToken (CVE-2021-33766) : An Authentication Bypass in Microsoft Exchange Server POC exploit

ProxyToken (CVE-2021-33766) : An Authentication Bypass in Microsoft Exchange Server POC exploit - bhdresh/CVE-2021-33766

78 viewsedited 09:04

Network Penetration Testing

Offensive WMI: Reconnaissance & Enumeration
https://0xinfection.github.io/posts/wmi-recon-enum

#WMI
#Enumeration
#Reconnaissance
@NetPentester

79 viewsedited 09:00

Network Penetration Testing

Offensive WMI: Reconnaissance & Enumeration https://0xinfection.github.io/posts/wmi-recon-enum #WMI #Enumeration #Reconnaissance @NetPentester

Offensive WMI:
Part 1 - Basics
https://0xinfection.github.io/posts/wmi-basics-part-1
Part 2 - Exploring Namespaces, Classes & Methods
https://0xinfection.github.io/posts/wmi-classes-methods-part-2
Part 3 - Interacting with Windows Registry
https://0xinfection.github.io/posts/wmi-registry-part-3

#WMI
@NetPentester

81 viewsedited 09:03

Network Penetration Testing

Active Directory Enumeration

https://0xinfection.github.io/posts/wmi-ad-enum

#AD
#Enumeration
#Microsoft

@NetPentester

94 viewsedited 19:02

Network Penetration Testing

حمله و ایمن سازی اکتیو دایرکتوری

https://rmusser.net/docs/Active_Directory.html

#Ad
#Pentest
#attack

@NetPentester

98 viewsBlack Fox, edited 11:46

Network Penetration Testing

BLE Passkey Bruteforce Attack
https://insinuator.net/2021/10/change-your-ble-passkey-like-you-change-your-underwear
]-> PoC:
https://github.com/ttdennis/bluetooth_smp_pocs

90 viewsBlack Fox, 06:44

Network Penetration Testing

Attacking Azure/Azure AD

https://hausec.com/2021/10/26/attacking-azure-azure-ad-part-ii

#cloud
#Ad
#azure
@NetPentester

hausec

Attacking Azure & Azure AD, Part II

Abstract When I published my first article, Attacking Azure & Azure AD and Introducing PowerZure, I had no idea I was just striking the tip of the iceberg. Over the past eight months, my co-wor…

100 viewsBlack Fox, edited 05:29

Network Penetration Testing

Full-featured C2 framework which silently persists
on webserver with a single-line PHP backdoor

https://github.com/nil0x42/phpsploit

#C2
#backdoor

@NetPentester

GitHub

GitHub - nil0x42/phpsploit: Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor - nil0x42/phpsploit

93 viewsBlack Fox, edited 06:05

Network Penetration Testing

Best of OSCP CTF Cheat Sheet.

https://github.com/Ignitetechnologies/Privilege-Escalation
https://github.com/Ignitetechnologies/HackTheBox-CTF-Writeups
https://github.com/Ignitetechnologies/Vulnhub-CTF-Writeups
https://github.com/Ignitetechnologies/TryHackMe-CTF-Writeups

#CTF #OSCP #Cheatsheet

GitHub

GitHub - Ignitetechnologies/Privilege-Escalation: This cheasheet is aimed at the CTF Players and Beginners to help them understand…

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples. - Ignitetechnologies/Privilege-Escalation

99 viewsBlack fox, 21:26

Network Penetration Testing

Windows & Active Directory Exploitation Cheat Sheet
and Command Reference

https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference

#AD
#pentest

@NetPentester

Cas van Cooten

Windows & Active Directory Exploitation Cheat Sheet and Command Reference

Last update: November 3rd, 2021
Updated November 3rd, 2021: Included several fixes and actualized some techniques. Changes made to the Defender evasion, RBCD, Domain Enumeration, Rubeus, and Mimikatz sections. Fixed some whoopsies as well 🙃.
Updated June…

109 viewsBlack fox, edited 07:31

Network Penetration Testing

https://thehackernews.com/2021/11/hardcoded-ssh-key-in-cisco-policy-suite.html

#cisco
#network

100 views15:29

Network Penetration Testing

Microsoft Exchange vulnerabilities exploited once again
for ransomware, this time with Babuk
https://blog.talosintelligence.com/2021/11/babuk-exploits-exchange.html?m=1

#Malware
#exchange
#microsoft

@NetPentester

98 viewsBlack fox, edited 07:36

Network Penetration Testing

AD Enum - pentesting tool that allows to find misconfiguration through the the protocol LDAP and exploit some of those weaknesses with kerberos
https://github.com/SecuProject/ADenum

Python implementation for Active Directory certificate abuse
https://github.com/ly4k/Certipy

@NetPentester

GitHub

GitHub - SecuProject/ADenum: AD Enum is a pentesting tool that allows to find misconfiguration through the the protocol LDAP and…

AD Enum is a pentesting tool that allows to find misconfiguration through the the protocol LDAP and exploit some of those weaknesses with kerberos. - SecuProject/ADenum

113 viewsOffensive01, edited 07:55

Network Penetration Testing

Practical HTTP Header Smuggling:
Sneaking Past Reverse Proxies to Attack AWS
https://www.intruder.io/research/practical-http-header-smuggling

ChaosDB Explained: Azure's Cosmos DB Vulnerability Walkthrough
https://www.wiz.io/blog/chaosdb-explained-azures-cosmos-db-vulnerability-walkthrough

#Cloud
#azure
#Vulnerability

@NetPentester

www.intruder.io

Practical HTTP Header Smuggling: Sneaking Past Reverse Proxies to Attack AWS and Beyond

Modern web applications typically rely on chains of multiple servers, which forward HTTP requests to one another. The attack surface created by this forwarding is increasingly receiving more attention, including the recent popularisation of cache poisoning...

117 viewsedited 08:47

Network Penetration Testing

Thick Client Penetration Testing Methodology
https://www.cyberark.com/resources/threat-research-blog/thick-client-penetration-testing-methodology

#RedTeam
#pentest

@NetPentester

369 viewsedited 08:50

About

Blog

Apps

Platform