😈 [ hackinarticles, Hacking Articles ]

A Detailed Guide on Rubeus

https://t.co/XmD8LfJGY5

#infosec #cybersecurity #cybersecuritytips #pentesting #oscp #redteam #informationsecurity #cissp #CyberSec #networking #networksecurity #CheatSheet #servers #windows

🔗 https://www.hackingarticles.in/a-detailed-guide-on-rubeus/

🐥 [ tweet ]

😈 [ hackinarticles, Hacking Articles ]

Domain Persistence: Silver Ticket Attack

https://t.co/GDmxv0kJID

#infosec #cybersecurity #cybersecuritytips #pentesting #oscp #redteam #informationsecurity #cissp #CyberSec #networking #networksecurity #CheatSheet #servers #windows

🔗 https://www.hackingarticles.in/domain-persistence-silver-ticket-attack/

🐥 [ tweet ]

😈 [ hackinarticles, Hacking Articles ]

Domain Escalation: Unconstrained Delegation

https://t.co/qWxRjcg7UF

#infosec #cybersecurity #cybersecuritytips #pentesting #oscp #redteam #informationsecurity #cissp #CyberSec #networking #networksecurity #CheatSheet #servers #windows

🔗 https://www.hackingarticles.in/domain-escalation-unconstrained-delegation/

🐥 [ tweet ]

😈 [ hackinarticles, Hacking Articles ]

Domain Persistence: Golden Certificate Attack

https://t.co/SmMarfX7hK

#infosec #cybersecurity #cybersecuritytips #pentesting #oscp #redteam #informationsecurity #cissp #CyberSec #networking #networksecurity #CheatSheet #servers #windows

🔗 https://www.hackingarticles.in/domain-persistence-golden-certificate-attack/

🐥 [ tweet ]

😈 [ CoreAdvisories, CoreLabs Research ]

Get an in-depth analysis of recent #Windows #vulnerability, CVE-2022-22029> from cybersecurity expert and #exploit writer @ricnar456
https://t.co/i4nyYDiapH

🔗 https://www.coresecurity.com/core-labs/articles/analysis-cve-2022-22029-windows-network-file-system-vulnerability

🐥 [ tweet ]

😈 [ podalirius_, Podalirius ]

[#thread 🧵] This weekend I wrote a #tool to scan for @TheApacheTomcat server #vulnerabilities in networks. I've always dreamed to be able to retrieve the list of computers in a #Windows #domain and scan for vulnerable #Apache #Tomcats automatically! 🎉

https://t.co/EOWfTbFCRh

🔗 https://github.com/p0dalirius/ApacheTomcatScanner/

🐥 [ tweet ]

😈 [ podalirius_, Podalirius ]

Today with my friend @_Worty we're releasing a technique to coerce an NTLM authentication on #Windows #SQL #Server as the machine account (in most cases). 🥳

A step by step demonstration is here: https://t.co/woCDA1M0Zr

🔗 https://github.com/p0dalirius/MSSQL-Analysis-Coerce

🐥 [ tweet ]

⭐️ Privileger

Privilger allows you to work with privileges in Windows as easily as possible. There are three modes:

— Add privileges to an account;
— Start a process by adding a specific privilege to its token;
— Remove privilege from the user.

Thanks to:
@Michaelzhm

https://github.com/MzHmO/Privileger

#ad #windows #privilege #lsa

😈 [ OtterHacker, OtterHacker ]

I published my Kerberos experiments. The code is here for educational use only. Do not use it for pentest as it is neither OPSEC nor stable and kinda messy.

But if you want to see how to play with #Kerberos with #Windows, it can be a starting point ! 😊

https://t.co/CPP2EfSKCb

🔗 https://github.com/OtterHacker/Cerbere

🐥 [ tweet ]

😈 [ r1cksec, r1cksec ]

New cheatsheets pushed 🕵️‍♂️

🔗 https://github.com/r1cksec/cheatsheets

Including:

A well written blog post on how to read and parse LSASS memory dumps with PowerShell 🔍

#infosec #cybersecurity #pentesting #redteam #lsass #windows

🔗 https://powerseb.github.io/posts/LSASS-parsing-without-a-cat

🐥 [ tweet ]

😈 [ HADESS @Hadess_security ]

The Art Of Hiding In Windows: techniques used by malicious actors to obscure their activities, making detection and analysis significantly more challenging for security professionals.

Article:
🔗 https://hadess.io/the-art-of-hiding-in-windows/

EBook:
🔗 https://hadess.io/the-art-of-hiding-in-windows-ebook/

#windows #redteam

🐥 [ tweet ]

(pdf-ка в комментах)

😈 [ NCV @nickvourd ]

Proudly Announcing Windows Local Privilege Escalation Cookbook
#pentest #redteam #windows #privesc

🔗 https://github.com/nickvourd/Windows-Local-Privilege-Escalation-Cookbook

🐥 [ tweet ]