NEW BOT Телеграм, страница - 544737861

Network Penetration Testing

1.03K subscribers

40 photos

3 videos

12 files

269 links

[ Network Penetration Testing & Cloud ]

Any misuse of this info will not be the responsibility of the author, educational purposes only.

@NetPentester

Download Telegram

About

Blog

Apps

Platform

Network Penetration Testing

1.03K subscribers

Network Penetration Testing

Offensive WMI: Reconnaissance & Enumeration
https://0xinfection.github.io/posts/wmi-recon-enum

#WMI
#Enumeration
#Reconnaissance
@NetPentesters

91 viewsBlack Fox, edited 06:49

Network Penetration Testing

Active Directory Enumeration

https://0xinfection.github.io/posts/wmi-ad-enum

#AD
#Enumeration
#Microsoft

@NetPentesters

85 viewsBlack Fox, edited 07:49

Network Penetration Testing

MITRE ATT & CK Matrix, ver.10.0:
More Objects, Parity, and Features
https://attack.mitre.org/resources/updates/updates-october-2021
]-> https://github.com/mitre/cti/releases/tag/ATT%26CK-v10.0

#MITRE
#attack

@NetPentesters

Release ATT&CK version 10.0 · mitre/cti

See release notes for the content changes here
See a summary of STIX changes here

86 viewsBlack Fox, edited 06:09

Network Penetration Testing

Attacking & Securing Active Directory

https://rmusser.net/docs/Active_Directory.html

#AD
#Pentest
#attack
@NetPentesters

88 viewsBlack Fox, edited 11:44

Network Penetration Testing

BLE Passkey Bruteforce Attack
https://insinuator.net/2021/10/change-your-ble-passkey-like-you-change-your-underwear
]-> PoC:
https://github.com/ttdennis/bluetooth_smp_pocs

#WLAN_Security
@NetPentesters

79 viewsBlack Fox, edited 06:38

Network Penetration Testing

Attacking Azure/Azure AD

https://hausec.com/2021/10/26/attacking-azure-azure-ad-part-ii

#cloud
#Ad
#azure
@NetPentesters

Attacking Azure & Azure AD, Part II

Abstract When I published my first article, Attacking Azure & Azure AD and Introducing PowerZure, I had no idea I was just striking the tip of the iceberg. Over the past eight months, my co-wor…

395 viewsBlack Fox, edited 05:29

Network Penetration Testing

Full-featured C2 framework which silently persists
on webserver with a single-line PHP backdoor

https://github.com/nil0x42/phpsploit

#C2
#backdoor

@NetPentesters

GitHub - nil0x42/phpsploit: Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor - nil0x42/phpsploit

100 viewsBlack Fox, edited 06:05

Network Penetration Testing

Best of OSCP CTF Cheat Sheet.

https://github.com/Ignitetechnologies/Privilege-Escalation
https://github.com/Ignitetechnologies/HackTheBox-CTF-Writeups
https://github.com/Ignitetechnologies/Vulnhub-CTF-Writeups
https://github.com/Ignitetechnologies/TryHackMe-CTF-Writeups

#CTF #OSCP #Cheatsheet

GitHub - Ignitetechnologies/Privilege-Escalation: This cheasheet is aimed at the CTF Players and Beginners to help them understand…

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples. - Ignitetechnologies/Privilege-Escalation

124 viewsBlack fox, 21:26

Network Penetration Testing

Windows & Active Directory Exploitation Cheat Sheet
and Command Reference
https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference

#AD
#pentest

@NetPentesters

Windows & Active Directory Exploitation Cheat Sheet and Command Reference

Last update: November 3rd, 2021
Updated November 3rd, 2021: Included several fixes and actualized some techniques. Changes made to the Defender evasion, RBCD, Domain Enumeration, Rubeus, and Mimikatz sections. Fixed some whoopsies as well 🙃.
Updated June…

144 viewsBlack fox, edited 07:30

Network Penetration Testing

https://thehackernews.com/2021/11/hardcoded-ssh-key-in-cisco-policy-suite.html

#cisco
#network

124 views15:29

Network Penetration Testing

Microsoft Exchange vulnerabilities exploited once again
for ransomware, this time with Babuk
https://blog.talosintelligence.com/2021/11/babuk-exploits-exchange.html?m=1

#Malware
#exchange
#microsoft

@NetPentesters

105 viewsedited 07:33

Network Penetration Testing

AD Enum - pentesting tool that allows to find misconfiguration through the the protocol LDAP and exploit some of those weaknesses with kerberos
https://github.com/SecuProject/ADenum

Python implementation for Active Directory certificate abuse
https://github.com/ly4k/Certipy

@NetPentesters

GitHub - SecuProject/ADenum: AD Enum is a pentesting tool that allows to find misconfiguration through the the protocol LDAP and…

AD Enum is a pentesting tool that allows to find misconfiguration through the the protocol LDAP and exploit some of those weaknesses with kerberos. - SecuProject/ADenum

129 viewsOffensive01, edited 07:56

Network Penetration Testing

Practical HTTP Header Smuggling:
Sneaking Past Reverse Proxies to Attack AWS
https://www.intruder.io/research/practical-http-header-smuggling

ChaosDB Explained: Azure's Cosmos DB Vulnerability Walkthrough
https://www.wiz.io/blog/chaosdb-explained-azures-cosmos-db-vulnerability-walkthrough

#Cloud
#azure
#Vulnerability
@NetPentesters

www.intruder.io

Practical HTTP Header Smuggling: Sneaking Past Reverse Proxies to Attack AWS and Beyond

Modern web applications typically rely on chains of multiple servers, which forward HTTP requests to one another. The attack surface created by this forwarding is increasingly receiving more attention, including the recent popularisation of cache poisoning...

122 viewsOffensive01, edited 08:45

Network Penetration Testing

Thick Client Penetration Testing Methodology
https://www.cyberark.com/resources/threat-research-blog/thick-client-penetration-testing-methodology

#RedTeam
#pentest

@NetPentesters

310 viewsOffensive01, edited 08:49

Network Penetration Testing

Active Directory penetration test mind map collection by Orange CyberDefense

GitHub
https://github.com/Orange-Cyberdefense/arsenal

All MindMap
https://github.com/Orange-Cyberdefense/arsenal/tree/master/mindmap

Additional
https://www.xmind.net/m/5dypm8/

#pentest
#windows
#ad

@NetPentesters

GitHub - Orange-Cyberdefense/arsenal: Arsenal is just a quick inventory and launcher for hacking programs

Arsenal is just a quick inventory and launcher for hacking programs - Orange-Cyberdefense/arsenal

139 viewsOffensive01, edited 12:01

Network Penetration Testing

pentest_ad_black.png

Active Directory Penetration Testing

@NetPentesters

134 viewsOffensive01, 12:05

Network Penetration Testing

BloodyAD is an Active Directory Privilege Escalation Framework
https://github.com/CravateRouge/bloodyAD

#AD
#privilege

@NetPentesters

GitHub - CravateRouge/bloodyAD: BloodyAD is an Active Directory Privilege Escalation Framework

BloodyAD is an Active Directory Privilege Escalation Framework - CravateRouge/bloodyAD

129 viewsedited 10:37

Network Penetration Testing

#5G_Network_Security
Exploit the Fuzz -
Exploiting Vulnerabilities in 5G Core Networks
https://research.nccgroup.com/2021/11/16/exploit-the-fuzz-exploiting-vulnerabilities-in-5g-core-networks

@NetPentesters

Cyber Security Research

Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.

133 viewsedited 03:22

Network Penetration Testing

ccs21_dns_poisoning.pdf

#Research
#DNS
"DNS Cache Poisoning Attack:
Resurrections with Side Channels", CCS'2021.

@NetPentesters

147 viewsedited 03:31

Network Penetration Testing

CVE-2021-42306 CredManifest:
App Registration Certificates Stored in Azure AD
https://www.netspi.com/blog/technical/cloud-penetration-testing/azure-cloud-vulnerability-credmanifest

#azure
#Ad
#Cloud
#Pentest
@NetPentesters

CVE-2021-42306 CredManifest: App Registration Certificates Stored in Azure Active Directory

The vulnerability, found by NetSPI’s cloud pentesting practice director, Karl Fosaaen, affects any organization that uses Automation Account "Run as" accounts in Azure.

153 viewsedited 10:29