NEW BOT Телеграм, страница - 801148097

Network Penetration Testing

559 subscribers

44 photos

3 videos

11 files

261 links

[ Network Penetration Testing & Cloud ]

Any misuse of this info will not be the responsibility of the author, educational purposes only.

Channel - En :
@NetPentesters

Download Telegram

About

Blog

Apps

Platform

Network Penetration Testing

559 subscribers

Network Penetration Testing

Azure Privilege Escalation via Service Principal Abuse

https://posts.specterops.io/azure-privilege-escalation-via-service-principal-abuse-210ae2be2a5

#Azure
#privilege

@NetPentester

Blog - SpecterOps

Your new best friend: Introducing BloodHound Community Edition!

74 viewsedited 06:36

Network Penetration Testing

ProxyToken (CVE-2021-33766) : An Authentication Bypass in Microsoft Exchange Server POC exploit

https://github.com/bhdresh/CVE-2021-33766

#exchange
#bypass

@NetPentester

GitHub - bhdresh/CVE-2021-33766: ProxyToken (CVE-2021-33766) : An Authentication Bypass in Microsoft Exchange Server POC exploit

ProxyToken (CVE-2021-33766) : An Authentication Bypass in Microsoft Exchange Server POC exploit - bhdresh/CVE-2021-33766

78 viewsedited 09:04

Network Penetration Testing

Offensive WMI: Reconnaissance & Enumeration
https://0xinfection.github.io/posts/wmi-recon-enum

#WMI
#Enumeration
#Reconnaissance
@NetPentester

79 viewsedited 09:00

Network Penetration Testing

Network Penetration Testing

Offensive WMI: Reconnaissance & Enumeration https://0xinfection.github.io/posts/wmi-recon-enum #WMI #Enumeration #Reconnaissance @NetPentester

Offensive WMI:
Part 1 - Basics
https://0xinfection.github.io/posts/wmi-basics-part-1
Part 2 - Exploring Namespaces, Classes & Methods
https://0xinfection.github.io/posts/wmi-classes-methods-part-2
Part 3 - Interacting with Windows Registry
https://0xinfection.github.io/posts/wmi-registry-part-3

#WMI
@NetPentester

81 viewsedited 09:03

Network Penetration Testing

Active Directory Enumeration

https://0xinfection.github.io/posts/wmi-ad-enum

#AD
#Enumeration
#Microsoft

@NetPentester

94 viewsedited 19:02

Network Penetration Testing

حمله و ایمن سازی اکتیو دایرکتوری

https://rmusser.net/docs/Active_Directory.html

#Ad
#Pentest
#attack

@NetPentester

98 viewsBlack Fox, edited 11:46

Network Penetration Testing

BLE Passkey Bruteforce Attack
https://insinuator.net/2021/10/change-your-ble-passkey-like-you-change-your-underwear
]-> PoC:
https://github.com/ttdennis/bluetooth_smp_pocs

90 viewsBlack Fox, 06:44

Network Penetration Testing

Attacking Azure/Azure AD

https://hausec.com/2021/10/26/attacking-azure-azure-ad-part-ii

#cloud
#Ad
#azure
@NetPentester

Attacking Azure & Azure AD, Part II

Abstract When I published my first article, Attacking Azure & Azure AD and Introducing PowerZure, I had no idea I was just striking the tip of the iceberg. Over the past eight months, my co-wor…

100 viewsBlack Fox, edited 05:29

Network Penetration Testing

Full-featured C2 framework which silently persists
on webserver with a single-line PHP backdoor

https://github.com/nil0x42/phpsploit

#C2
#backdoor

@NetPentester

GitHub - nil0x42/phpsploit: Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor - nil0x42/phpsploit

93 viewsBlack Fox, edited 06:05

Network Penetration Testing

Best of OSCP CTF Cheat Sheet.

https://github.com/Ignitetechnologies/Privilege-Escalation
https://github.com/Ignitetechnologies/HackTheBox-CTF-Writeups
https://github.com/Ignitetechnologies/Vulnhub-CTF-Writeups
https://github.com/Ignitetechnologies/TryHackMe-CTF-Writeups

#CTF #OSCP #Cheatsheet

GitHub - Ignitetechnologies/Privilege-Escalation: This cheasheet is aimed at the CTF Players and Beginners to help them understand…

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples. - Ignitetechnologies/Privilege-Escalation

99 viewsBlack fox, 21:26

Network Penetration Testing

Windows & Active Directory Exploitation Cheat Sheet
and Command Reference

https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference

#AD
#pentest

@NetPentester

Windows & Active Directory Exploitation Cheat Sheet and Command Reference

Last update: November 3rd, 2021
Updated November 3rd, 2021: Included several fixes and actualized some techniques. Changes made to the Defender evasion, RBCD, Domain Enumeration, Rubeus, and Mimikatz sections. Fixed some whoopsies as well 🙃.
Updated June…

109 viewsBlack fox, edited 07:31

Network Penetration Testing

https://thehackernews.com/2021/11/hardcoded-ssh-key-in-cisco-policy-suite.html

#cisco
#network

100 views15:29

Network Penetration Testing

Microsoft Exchange vulnerabilities exploited once again
for ransomware, this time with Babuk
https://blog.talosintelligence.com/2021/11/babuk-exploits-exchange.html?m=1

#Malware
#exchange
#microsoft

@NetPentester

98 viewsBlack fox, edited 07:36

Network Penetration Testing

AD Enum - pentesting tool that allows to find misconfiguration through the the protocol LDAP and exploit some of those weaknesses with kerberos
https://github.com/SecuProject/ADenum

Python implementation for Active Directory certificate abuse
https://github.com/ly4k/Certipy

@NetPentester

GitHub - SecuProject/ADenum: AD Enum is a pentesting tool that allows to find misconfiguration through the the protocol LDAP and…

AD Enum is a pentesting tool that allows to find misconfiguration through the the protocol LDAP and exploit some of those weaknesses with kerberos. - SecuProject/ADenum

113 viewsOffensive01, edited 07:55

Network Penetration Testing

Practical HTTP Header Smuggling:
Sneaking Past Reverse Proxies to Attack AWS
https://www.intruder.io/research/practical-http-header-smuggling

ChaosDB Explained: Azure's Cosmos DB Vulnerability Walkthrough
https://www.wiz.io/blog/chaosdb-explained-azures-cosmos-db-vulnerability-walkthrough

#Cloud
#azure
#Vulnerability

@NetPentester

www.intruder.io

Practical HTTP Header Smuggling: Sneaking Past Reverse Proxies to Attack AWS and Beyond

Modern web applications typically rely on chains of multiple servers, which forward HTTP requests to one another. The attack surface created by this forwarding is increasingly receiving more attention, including the recent popularisation of cache poisoning...

117 viewsedited 08:47

Network Penetration Testing

Thick Client Penetration Testing Methodology
https://www.cyberark.com/resources/threat-research-blog/thick-client-penetration-testing-methodology

#RedTeam
#pentest

@NetPentester

367 viewsedited 08:50

Network Penetration Testing

مجموعه نقشه ذهنی تست نفوذ Active Directory توسط Orange CyberDefense

GitHub
https://github.com/Orange-Cyberdefense/arsenal

All MindMap
https://github.com/Orange-Cyberdefense/arsenal/tree/master/mindmap

Additional
https://www.xmind.net/m/5dypm8/

#pentest
#windows
#ad

@NetPentester

GitHub - Orange-Cyberdefense/arsenal: Arsenal is just a quick inventory and launcher for hacking programs

Arsenal is just a quick inventory and launcher for hacking programs - Orange-Cyberdefense/arsenal

147 viewsedited 12:02

Network Penetration Testing

pentest_ad_black.png

Active Directory Penetration testing

@NetPentester

149 views12:05

Network Penetration Testing

BloodyAD is an Active Directory Privilege Escalation Framework
https://github.com/CravateRouge/bloodyAD

#AD
#privilege

@NetPentester

GitHub - CravateRouge/bloodyAD: BloodyAD is an Active Directory Privilege Escalation Framework

BloodyAD is an Active Directory Privilege Escalation Framework - CravateRouge/bloodyAD

145 viewsedited 10:36

Network Penetration Testing

#امنیت_شبکه 5G

بهره برداری از Fuzz - بهره برداری از آسیب پذیری ها در شبکه های اصلی 5G

https://research.nccgroup.com/2021/11/16/exploit-the-fuzz-exploiting-vulnerabilities-in-5g-core-networks

@NetPentester

Cyber Security Research

Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.

149 viewsedited 03:23