APT – Telegram

LDAP Monitor

Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration!
With this tool you can quickly see if your attack worked and if it changed LDAP attributes of the target object.

https://github.com/p0dalirius/LDAPmonitor

#ldap #monitor

264 views14:54

APT

VirusTotal Enterprise free API Key

API Key:
```859b88dbbd798a5093089e0455a3d44e9fcb411603041f447f1161be3b96fb18

```Example:

curl 'https://www.virustotal.com/vtapi/v2/file/download?apikey=859b88dbbd798a5093089e0455a3d44e9fcb411603041f447f1161be3b96fb18&hash=76f52cba288145242a77a8762282d8d0e6d8fb3160b5fefb7b92649e503c62a1' --location --output wannacry.exe

Source

UPD:
This key has been revoked

#virustotal #enterprise #apikey #free

471 viewsedited 15:59

APT

https://medium.com/@atemate/kubernetes-security-three-common-attacks-f3178abfd158

Medium

Kubernetes Security: Three Common Attacks

A webinar follow-up: demonstration of three common attacks on K8s systems

300 views19:57

APT

Offensive WMI - Reconnaissance & Enumeration (Part 4) This post focuses on interacting with several WMI classes to extract useful and sensitive information https://0xinfection.github.io/posts/wmi-recon-enum/ #wmi

Offensive WMI - Active Directory Enumeration (Part 5)

https://0xinfection.github.io/posts/wmi-ad-enum/

#wmi

325 views00:46

APT

LSASS Encrypted Dump

https://sp00ks-git.github.io/posts/LSASS-Encrypted-Dump/

#lsass #dump

A Pentesters Ramblings

LSASS Encrypted Dump

There are many, many ways to dump the LSASS process in order to gather credentials and other sensitive information from systems.

294 views14:59

APT

Kubernetes Security Checklist and Requirements

https://github.com/Vinum-Security/kubernetes-security-checklist

#kubernetes #checklist

GitHub

GitHub - Vinum-Security/kubernetes-security-checklist: Kubernetes Security Checklist and Requirements - All in One (authentication…

Kubernetes Security Checklist and Requirements - All in One (authentication, authorization, logging, secrets, configuration, network, workloads, dockerfile) - Vinum-Security/kubernetes-security-che...

313 views18:49

APT

Shellcode Injection Techniques

A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload.

https://github.com/plackyhacker/Shellcode-Injection-Techniques

#inject #shellcode #csharp

GitHub

GitHub - plackyhacker/Shellcode-Injection-Techniques: A collection of C# shellcode injection techniques. All techniques use an…

A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload. I will be building this project up as I learn, discover or develop more techniques. Some ...

285 views12:40

APT

This media is not supported in your browser

VIEW IN TELEGRAM

ZipExec

Is a Proof-of-Concept (POC) tool to wrap binary-based tools into a password-protected zip file. This zip file is then base64 encoded into a string that is rebuilt on disk. This encoded string is then loaded into a JScript file that when executed, would rebuild the password-protected zip file on disk and execute it. This is done programmatically by using COM objects to access the GUI-based functions in Windows via the generated JScript loader, executing the loader inside the password-protected zip without having to unzip it first. By password protecting the zip file, it protects the binary from EDRs and disk-based or anti-malware scanning mechanisms.

https://github.com/Tylous/ZipExec

#redteam #netsec

347 views19:54

APT

This media is not supported in your browser

VIEW IN TELEGRAM

LOLBAS WorkFolders.exe

"C:\Windows\System32\WorkFolders.exe" (signed by MS) can be used to run arbitrary executables in the current working directory with the name control.exe. It's like a new rundll32.exe lolbin but for EXEs!

#lolbin #lolbas

355 views19:58

APT

Jira Unauthenticated Access to Screens

Exploit: