Commit graph

398 commits

Author SHA1 Message Date
CPol
da42a67a80
GITBOOK-4216: change request with no subject merged in GitBook 2023-12-26 00:45:07 +00:00
Carlos Polop
2cf03a3f4b
Merge pull request #764 from evilmog/master
update NTLMv1 cracking methodology
2023-12-24 20:11:47 +01:00
Carlos Polop
03fb0ebb99
Merge pull request #758 from manesec/master
Update SNMP and Basic PowerShell for Pentesters
2023-12-24 19:53:33 +01:00
evilmog
dde7fbec2a update NTLMv1 cracking methodology 2023-12-19 15:59:00 -07:00
evilmog
3818e73d6f update NTLMv1 cracking methodology 2023-12-19 11:02:28 -07:00
CPol
20b5224810
GITBOOK-4192: change request with no subject merged in GitBook 2023-12-16 13:28:14 +00:00
Mane
9878e7b8ac
Update README.md
Add `AMSI Bypass - More Resources` 
Add `Powershell - Port scan`

## Reference - `AMSI Bypass - More Resources`

[S3cur3Th1sSh1t/Amsi-Bypass-Powershell](https://github.com/S3cur3Th1sSh1t/Amsi-Bypass-Powershell)

[Amsi Bypass on Windows 11 In 2023](https://gustavshen.medium.com/bypass-amsi-on-windows-11-75d231b2cac6)  [Github](https://github.com/senzee1984/Amsi_Bypass_In_2023)

## Reference - `Powershell - Port scan`

https://techcommunity.microsoft.com/t5/itops-talk-blog/powershell-basics-how-to-scan-open-ports-within-a-network/ba-p/924149

https://medium.com/@nallamuthu/powershell-port-scan-bf27fc754585

https://www.sans.org/blog/pen-test-poster-white-board-powershell-built-in-port-scanner/
2023-12-12 01:57:52 -08:00
carlospolop
81005f76c9 hp 2023-12-04 16:57:41 +01:00
carlospolop
21ed9007c4 hackenproof 2023-12-04 16:45:05 +01:00
Taleb Qasem
58cabb472f
Update dpapi-extracting-passwords.md
minor typos
2023-11-27 18:26:17 +06:00
Carlos Polop
4f348a96e0
Merge pull request #738 from manesec/master
Update privileged-groups-and-token-privileges.md
2023-11-06 00:20:23 +01:00
CPol
6b1e75d284
GITBOOK-4151: change request with no subject merged in GitBook 2023-11-05 22:38:46 +00:00
Carlos Polop
8335321618
Merge pull request #736 from OmriBaso/master
Added WTSImpersonator to HackTricks - New Technique for lateral movement and credentails stealing.
2023-11-05 23:19:17 +01:00
Carlos Polop
390404cb36
Merge pull request #731 from ir0nstone/patch-1
Fix command flag in domain-escalation.md
2023-11-05 17:10:40 +01:00
CPol
a3ad24c9ea
GITBOOK-4148: change request with no subject merged in GitBook 2023-11-03 11:03:53 +00:00
CPol
233703a1b1
GITBOOK-4146: change request with no subject merged in GitBook 2023-11-02 16:52:21 +00:00
Mane
47971d2aff
Update privileged-groups-and-token-privileges.md
Add `Using wbadmin.exe to dumo NTDS.dit`
2023-11-02 03:03:31 -07:00
Omri Baso
f6d3e27ee4
Add files via upload 2023-10-29 22:14:25 +02:00
Andrej L
3ddbdaa4e9
Update domain-escalation.md
Flag for Certipy [has changed](https://github.com/ly4k/Certipy#esc1) from `-alt` to `-upn` for abusing ESC1.
2023-10-23 16:10:03 +01:00
CPol
63857c0541
GITBOOK-4126: change request with no subject merged in GitBook 2023-10-15 16:45:54 +00:00
CPol
6a5f71e401
GITBOOK-4121: change request with no subject merged in GitBook 2023-10-14 20:45:59 +00:00
Carlos Polop
6b6da2aa1d
Merge pull request #719 from nuts7/certutil-ntlmcoerce-newtech
Add NTLM auth coerce technique (certutil.exe)
2023-10-12 00:46:14 +02:00
nuts7
6a6ccd91d1 Add NTLM auth coerce technique (certutil.exe)
This commit add a new NTLM authentication coerce technique with the certutil.exe lolbin (Microsoft-signed binary)
2023-10-11 17:47:02 +00:00
nuts7
c10d59667f Add Kerberoasting w/o domain account
This commit add a Kerberoasting technique without domain account/credentials just a user without pre-authentication (AS_REP Roastable)
2023-10-06 12:11:57 +00:00
CPol
aafdb7f10e
GITBOOK-4111: change request with no subject merged in GitBook 2023-10-05 14:47:43 +00:00
CPol
261348bb2c
GITBOOK-4100: change request with no subject merged in GitBook 2023-09-28 15:09:34 +00:00
CPol
afd72865a1
GITBOOK-4092: change request with no subject merged in GitBook 2023-09-24 09:51:34 +00:00
CPol
f2d97a41ce
GITBOOK-4078: change request with no subject merged in GitBook 2023-09-11 15:21:29 +00:00
carlospolop
93b6df668e trickest 2023-09-05 00:10:11 +02:00
carlospolop
987e1109d8 trickest 2023-09-03 17:41:02 +02:00
carlospolop
d308298b26 intruder 2023-09-03 01:51:32 +02:00
carlospolop
2463753c56 intruder 2023-09-03 01:48:41 +02:00
CPol
0de31f2383
GITBOOK-4061: change request with no subject merged in GitBook 2023-08-31 15:11:42 +00:00
CPol
749e1c091d
GITBOOK-4059: change request with no subject merged in GitBook 2023-08-30 09:07:26 +00:00
Carlos Polop
02139b4168
Merge pull request #694 from NaxnN/master-2
Update information about "Credential Guard"
2023-08-29 20:32:36 +02:00
Carlos Polop
24eed6e768
Merge pull request #692 from limon768/limon768-patch-1
Update README.md
2023-08-29 20:20:22 +02:00
KeoOp
d6b6d61fe7
Update information about "Credential Guard" 2023-08-24 16:00:17 +08:00
CPol
7b95b4b0e9
GITBOOK-4044: change request with no subject merged in GitBook 2023-08-22 09:57:13 +00:00
SquareZer0
84c85d450b
Update README.md
Fixed a typo
2023-08-20 22:04:03 -04:00
CPol
554b95eac8
GITBOOK-4035: change request with no subject merged in GitBook 2023-08-16 04:32:29 +00:00
Carlos Polop
d762d11ebc
Merge pull request #681 from clem9669/patch-11
Update shadow-credentials.md
2023-08-07 07:27:48 +02:00
CPol
d66ecb4cdd
GITBOOK-4021: change request with no subject merged in GitBook 2023-07-31 15:59:11 +00:00
CPol
84d05a4c74
GITBOOK-4018: change request with no subject merged in GitBook 2023-07-30 21:28:42 +00:00
CPol
0b9f09f1ce
GITBOOK-4016: change request with no subject merged in GitBook 2023-07-28 11:44:45 +00:00
clem9669
26d9aa42f8
Update shadow-credentials.md
Adding pywhisker.py from Shutdown
2023-07-27 15:39:17 +00:00
Carlos Polop
e93ed39f00
Merge pull request #666 from noraj/patch-1
kerberoast: add some linux tools
2023-07-18 15:03:29 +02:00
Carlos Polop
555ba02e37
Merge pull request #664 from Safarchand/patch-2
Update laps.md
2023-07-17 16:54:03 +02:00
carlospolop
d84af2b1f5 hp 2023-07-14 17:03:41 +02:00
Alexandre ZANNI
edc2fbae0f
kerberoast: add some linux tools 2023-07-04 11:40:16 +02:00
Safarchand
7958cd1984
Update laps.md
Fixed typing error in ms-msc-AdmPwd to ms-mcs-AdmPwd
2023-06-29 08:16:34 +05:30
CPol
1b10ed65e2
GITBOOK-3992: change request with no subject merged in GitBook 2023-06-25 23:05:20 +00:00
Carlos Polop
0a0dcec95c
Merge pull request #658 from ryanq47/patch-2
Update kerberoast.md
2023-06-25 15:40:02 +02:00
Carlos Polop
c8de9ff9ab
Merge pull request #655 from Exzh34/patch-2
Update laps.md
2023-06-24 18:59:28 +02:00
Carlos Polop
0ecdf1cf94
Merge pull request #647 from JonasBK/patch-1
Add links to blog posts on priv esc from DA to EA using ADCS
2023-06-17 17:21:56 +02:00
CPol
fe817f76e6
GITBOOK-3986: change request with no subject merged in GitBook 2023-06-14 17:31:12 +00:00
CPol
9a68c91e4e
GITBOOK-3984: change request with no subject merged in GitBook 2023-06-14 10:51:55 +00:00
CPol
fa3b6dffc2
GITBOOK-3983: change request with no subject merged in GitBook 2023-06-14 00:31:26 +00:00
Ryan Kleffman
e51f4b2682
Update kerberoast.md
Added rdate as an additional option for the NTP Clock Skew sync with a DC. ntpdate is deprecated/not included as of ubuntu 16.04.
2023-06-13 11:03:54 -05:00
Nuno Abreu
cd0c920c80
Update laps.md
fixed typo
2023-06-11 17:48:40 +01:00
CPol
cd4025c14f
GITBOOK-3968: change request with no subject merged in GitBook 2023-06-06 22:57:49 +00:00
CPol
e53c11a86a
GITBOOK-3966: change request with no subject merged in GitBook 2023-06-06 21:42:32 +00:00
Jonas Bülow Knudsen
6d2e3ef79a
Add info for DA to EA attacks 2023-06-03 13:23:19 +02:00
Jonas Bülow Knudsen
dbcc1f7aac
Merge branch 'carlospolop:master' into patch-1 2023-06-03 12:28:06 +02:00
CPol
ff4a3d95b7
GITBOOK-3962: change request with no subject merged in GitBook 2023-06-01 20:34:49 +00:00
Virgile Jarry
9368d214b6
Update README.md
Adds reference to ntdsdotsqlite.
2023-06-01 07:14:16 +02:00
CPol
2d9f506e60
GITBOOK-3958: change request with no subject merged in GitBook 2023-05-29 20:18:06 +00:00
CPol
fbc68e5920
GITBOOK-3956: change request with no subject merged in GitBook 2023-05-29 10:35:28 +00:00
CPol
28e205b34c
GITBOOK-3949: change request with no subject merged in GitBook 2023-05-26 15:11:27 +00:00
CPol
c6842d3ff8
GITBOOK-3947: change request with no subject merged in GitBook 2023-05-26 11:10:05 +00:00
carlospolop
fdf9afee4e hacking career 2023-05-26 11:43:15 +02:00
Carlos Polop
3af643b138
Merge pull request #630 from BuFuuu/com-hijacking-lang-update
find os language independent users group by using the SID
2023-05-26 11:40:44 +02:00
Jonas Bülow Knudsen
ac5a096d05
Add links to blog posts on priv esc from DA to EA using ADCS 2023-05-26 09:25:09 +02:00
CPol
8460bde312
GITBOOK-3905: change request with no subject merged in GitBook 2023-05-10 11:58:37 +00:00
CPol
2fafcfd659
GITBOOK-3903: change request with no subject merged in GitBook 2023-05-09 16:45:28 +00:00
CPol
a20214cf10
GITBOOK-3900: change request with no subject merged in GitBook 2023-05-09 09:37:25 +00:00
CPol
c469ce05ac
GITBOOK-3892: change request with no subject merged in GitBook 2023-05-04 23:22:39 +00:00
CPol
2b388335f4
GITBOOK-3888: change request with no subject merged in GitBook 2023-05-02 09:40:52 +00:00
CPol
68dbaa159b
GITBOOK-3887: change request with no subject merged in GitBook 2023-05-02 09:10:31 +00:00
CPol
98facb9725
GITBOOK-3883: change request with no subject merged in GitBook 2023-04-30 21:23:47 +00:00
Lion Hellstern
03c8710605 find os language independent users group by using the SID 2023-04-26 18:49:29 +02:00
carlospolop
5ec5b67e79 update twitter 2023-04-25 20:35:28 +02:00
CPol
34c27bc4e1
GITBOOK-3879: change request with no subject merged in GitBook 2023-04-18 23:46:39 +00:00
CPol
28ce005c4a
GITBOOK-3874: change request with no subject merged in GitBook 2023-04-13 22:25:26 +00:00
CPol
dd44a81b21
GITBOOK-3873: change request with no subject merged in GitBook 2023-04-13 21:47:15 +00:00
carlospolop
286ea6a24c hacktricks cloud 2023-04-07 10:52:01 +02:00
carlospolop
2197a2102f f 2023-04-05 17:19:27 +02:00
CPol
c3d99d5e4f
GITBOOK-3863: change request with no subject merged in GitBook 2023-04-05 15:16:57 +00:00
carlospolop
1fa9f77ec3 change 2023-04-05 14:02:54 +02:00
Justin Applegate
8dc4dccc99
Forgot to add link to original source 2023-03-29 14:51:07 -06:00
Justin Applegate
8b1a7c640d
Adding in bypass when SeDebugPrivilege is revoked 2023-03-29 14:47:22 -06:00
CPol
bfb02053d9
GITBOOK-3838: change request with no subject merged in GitBook 2023-03-28 11:38:04 +00:00
CPol
dee4c5fa4e
GITBOOK-3836: change request with no subject merged in GitBook 2023-03-28 10:15:00 +00:00
Carlos Polop
c1ab58a6b7
Merge pull request #605 from 0sunday/patch-1
Correct typo
2023-03-27 11:33:58 +02:00
0sunday
d76f6c5d2f
Correct typo 2023-03-20 15:41:00 +00:00
G. Danken-Sicherheit
2d1109765a
Update bloodhound.md
Update link to custom queries file in CompassSecurity repo
2023-03-15 08:20:47 +01:00
CPol
6b22eab3d2
GITBOOK-3820: No subject 2023-03-12 18:00:45 +00:00
Carlos Polop
070cf07c1b
Merge pull request #600 from JoelGMSec/patch-1
Added CVE-2019-1388
2023-03-12 18:47:20 +01:00
Joel GM
6fc2b44df4
Added CVE-2019-1388 2023-03-12 14:59:04 +01:00
Cunaz
7d8750957f
Typo
nltest /domain_trust #Mapping of the trust relationships
->
nltest /domain_trusts #Mapping of the trust relationships
2023-03-06 19:20:33 +01:00
carlospolop
f0e09e3f54 social 2023-03-06 00:16:20 +01:00