/explore
|
You are here 
|
wsummerhill.github.io | ||
| | | | |
blog.ragab0t.com
Impact-Site-Verification: 4492c1e7-b83e-4100-a986-421f0ae9bd9d Disclaimer This blog is related to Computer Security and Ethical hacking and does not promote hacking, cracking, software piracy or any kind of illegal activities. The blog is for informa... |
|
| | | | | ||
| | | | |
0xboku.com
[AI summary] This blog post discusses the process of modifying a TCP reverse shell shellcode to remove null characters, enabling its injection into host programs, and demonstrates its successful execution. |
|
| | | | | ||
| | | | |
cocomelonc.github.io
|
|
| | | | | ||
| | | | |
0xdf.gitlab.io
One of the neat things about HTB is that it exposes Windows concepts unlike any CTF I'd come across before it. Forest is a great example of that. It is a domain controller that allows me to enumerate users over RPC, attack Kerberos with AS-REP Roasting, and use Win-RM to get a shell. Then I can take advantage of the permissions and accesses of that user to get DCSycn capabilities, allowing me to dump hashes for the administrator user and get a shell as the admin. In Beyond Root, I'll look at what DCSync looks like on the wire, and look at the automated task cleaning up permissions. |
|
| | | |||
