/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 securitypimp.net
Remote.htb - [security.pimp]
| | blog.ikuamike.io
Hack The Box: Bastion ::
2.5 parsecs away

Travel
| |
| | 0xdf.gitlab.io
HTB: Sizzle | 0xdf hacks stuff
1.9 parsecs away

Travel
| | I loved Sizzle. It was just a really tough box that reinforced Windows concepts that I hear about from pentesters in the real world. I'll start with some SMB access, use a .scf file to capture a users NetNTLM hash, and crack it to get creds. From there I can create a certificate for the user and then authenticate over WinRM. I'll Kerberoast to get a second user, who is able to run the DCSync attack, leading to an admin shell. I'll have two beyond root sections, the first to show two unintended paths, and the second to exploit NTLM authentication over HTTP, and how Burp breaks it.
| | www.tarlogic.com
Kerberos (II): How to attack Kerberos?
1.7 parsecs away

Travel
| | Kerberos attacks: Kerberos brute-force, ASREPRoast, Kerberoasting, Pass the key, Pass the ticket, Silver ticket and Golden ticket explanation.
| | conradresearch.com
FreeBSD 14.3 on Parallels 26
23.1 parsecs away

Travel
| Getting FreeBSD 14.3 running on Parallels 26 was a bit of a challenge. Here are the steps I took to get it working.