Explore >> Select a destination


You are here

www.bloggingforlogging.com
| | cornerpirate.com
3.9 parsecs away

Travel
| | It finally happened: you have used responder to capture hashes but failed to crack them. This post covers one more way you can use Responder to gain access anyway. Just Give Me the Steps If you are time poor here is just the steps: Find a list of hosts on the network that do not...
| | nbailey.ca
4.2 parsecs away

Travel
| | Kubernetes is our generation's Asbestos.
| | shenaniganslabs.io
3.9 parsecs away

Travel
| | By default, domain joined Windows workstations allow access to the network selection UI from the lock screen. An attacker with physical access to a locked device with WiFi capabilities (such as a laptop or a workstation) can abuse this functionality to force the laptop to authenticate against a rogue access point and capture a MSCHAPv2 challenge response hash for the domain computer account. This challenge response hash can then be submitted to crack.sh to recover the NTLM hash of the computer account in less than 24 hours. Once recovered, this NTLM hash combined with the domain SID can be used to forge Kerberos silver tickets to impersonate a privileged user and compromise the host. An example of this is to create a silver ticket for the CIFS service of the...
| | blog.ifsg.ca
31.6 parsecs away

Travel
| This post will detail how to setup a pair of active directory domain controllers using Samba 4 on Ubuntu 20.04 Server. One will be a pr...