Outer Web | Explore

/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.

You are here		blog.ikuamike.io Hack The Box: Forest
\|	\|	zer1t0.gitlab.io Attacking Active Directory: 0 to 0.9 \| zer1t0	1.5 parsecs away Travel
\|	\|		1.5 parsecs away Travel
\|	\|	www.securitynik.com Learning by practicing: Beginning AS-REP Roasting with Impacket and Rubeus	2.8 parsecs away Travel
\|	\|	In this post, I'm learning about Kerberos and one of its attacks. Specifically, I'm learning about Authentication Service Response (AS-REP) ...	2.8 parsecs away Travel
\|	\|	0xdf.gitlab.io HTB: Forest \| 0xdf hacks stuff	0.7 parsecs away Travel
\|	\|	One of the neat things about HTB is that it exposes Windows concepts unlike any CTF I'd come across before it. Forest is a great example of that. It is a domain controller that allows me to enumerate users over RPC, attack Kerberos with AS-REP Roasting, and use Win-RM to get a shell. Then I can take advantage of the permissions and accesses of that user to get DCSycn capabilities, allowing me to dump hashes for the administrator user and get a shell as the admin. In Beyond Root, I'll look at what DCSync looks like on the wire, and look at the automated task cleaning up permissions.	0.7 parsecs away Travel
\|	\|	words.filippo.io Encrypting Files with Passkeys and age	27.2 parsecs away Travel
\|		Encrypting files with passkeys, using the WebAuthn prf extension and the TypeScript age implementation.	27.2 parsecs away Travel