hacking: security in practice
CompTIA A+ Full Course Training For Free

Hi everyone,

I'm currently delivering free training on the full CompTIA A+ course. The course consists of 18 modules and I created a dedicated video for each module. Some of these videos might be a bit long since each video covers a whole module after all.

I added time stamps in each video for you convenience if your only looking for something specific in a module or only want to refresh on a certain topic so please feel free to make use of them.

There will be 20 videos for this course, the first is just the 4min intro explaining the course, the last will be a dedicated exam tips video and then obviously the 18 videos in between will be your modules with the actual course.

The training should be enough to pass both the international exams for A+ and the other courses I deliver should also be enough to pass the exams associated if there is a exam associated to that specific course.

If you have a question about a specific topic in a module or the course in general that you would like more clarity on, please feel free to ask and I will try to assist you where I can if I'm online.

Here is the course intro

CompTIA A+ Course Intro

submitted by /u/CandyRapper1
[link] [comments]

Red Team Lead Job - Remote Possible
https://www.reddit.com/r/redteamsec/comments/sdv3tt/red_team_lead_job_remote_possible/

submitted by /u/jeffreyshran (https://www.reddit.com/user/jeffreyshran)
[link] (https://twitter.com/JeffreyShran/status/1486642192064077824?s=20) [comments] (https://www.reddit.com/r/redteamsec/comments/sdv3tt/red_team_lead_job_remote_possible/)

Kindle You’re My Little Cuddle Bug Full
https://medium.com/@simple.sto.p568.0/kindle-youre-my-little-cuddle-bug-full-844cd96a25f7?source=rss------bug_bounty-5

You’re My Little Cuddle Bug Read Online
 
 Download Link => You’re My Little Cuddle Bug 
 
 Deskripsi Book
 Celebrate your little cuddle…Continue reading on Medium » (https://medium.com/@simple.sto.p568.0/kindle-youre-my-little-cuddle-bug-full-844cd96a25f7?source=rss------bug_bounty-5)

Tìm những bug trên Symfony
https://rei-hunt.medium.com/t%C3%ACm-nh%E1%BB%AFng-bug-tr%C3%AAn-symfony-599f4c4130d3?source=rss------bug_bounty-5

Cre:How I was able to find multiple vulnerabilities of a Symfony Web Framework web application | by Abid Ahmad | Jan, 2022 | MediumContinue reading on Medium » (https://rei-hunt.medium.com/t%C3%ACm-nh%E1%BB%AFng-bug-tr%C3%AAn-symfony-599f4c4130d3?source=rss------bug_bounty-5)

Tìm những bug trên Symfony

Cre:How I was able to find multiple vulnerabilities of a Symfony Web Framework web application | by Abid Ahmad | Jan, 2022 | MediumContinue reading on Medium »
Read more...

KitPloit - PenTest Tools!
BloodyAD - An Active Directory Privilege Escalation Framework

https://blogger.googleusercontent.com/img/a/AVvXsEiOul_KCkh9ENHvZadXvKqVY2grj6MP9ngEozIq4I-y_afr5xhRsEQsfOp5ad2OFlwFhqKOZdYO046qLVNBW3fpullLfPqqW9CMQb-yPIBptr8BfWHydGHM2AVY9kBv2dSSCpQgi3H8rIXYkGK9EO8zdFfIzdVwOZEaCgYoEBgcO6jIBRyfXkpncoxM=w640-h318 BloodyAD is an Active Directory Privilege Escalation Framework, it can be used manually using bloodyAD.pyor automatically by combining pathgen.pyand autobloody.py.

This framework supports NTLM (with password or NTLM hashes) and Kerberos authentication and binds to LDAP/LDAPS/SAMR services of a domain controller to obtain AD privesc.

It is designed to be used transparently with a SOCKS proxy. bloodyADDescriptionThis tool can perform specific LDAP/SAMR calls to a domain controller in order to perform AD privesc. RequirementsThe following are required:

* Python 3
* DSinternals
* Impacket
* Ldap3 Use the requirements.txt for your virtual environment: pip3 install -r requirements.txtUsageSimple usage: python bloodyAD.py --host 172.16.1.15 -d MYDOM -u myuser -p :70016778cb0524c799ac25b439bd6a31 changePassword mytarget 'Password123!'List of all available functions: [bloodyAD]$ python bloodyAD.py -h
usage: bloodyAD.py [-h] [-d DOMAIN] [-u USERNAME] [-p PASSWORD] [-k] [-s {ldap,ldaps,rpc}] [--host HOST] {getGroupMembers,
getObjectAttributes, getObjectSID, addUser, addComputer, delObject, changePassword, addObjectToGroup, addForeignObjectToGroup,
delObjectFromGroup, getObjectsInOu, getOusInOu, getUsersInOu, getComputersInOu, addDomainSync, delDomainSync, addRbcd, delRbcd,
addShadowCredentials, delShadowCredentials, modifyGpoACL, setDontReqPreauthFlag, setAccountDisableFlag}
...

Active Directory Privilege Escalation Framework

Main options:
-h, --help show this help message and exit
-d DOMAIN, --domain DOMAIN
Domain used for NTLM authentication
-u USERNAME, --username USERNAME
Username used for NTLM authentication
-p PASSWORD, --password PASS WORD
Cleartext password or LMHASH:NTHASH for NTLM authentication
-k, --kerberos
-s {ldap,ldaps,rpc}, --scheme {ldap,ldaps,rpc}
Use LDAP over TLS (default is LDAP)
--host HOST Hostname or IP of the DC (ex: my.dc.local or 172.16.1.3)

Commands:
{getGroupMembers, getObjectAttributes, getObjectSID, addUser, addComputer, delObject, changePassword, addObjectToGroup,
addForeignObjectToGroup, delObjectFromGroup, getObjectsInOu, getOusInOu, getUsersInOu, getComputersInOu, addDomainSync,
delDomainSync, addRbcd, delRbcd, addShadowCredentials, delShadowCredentials, modifyGpoACL, setDontReqPreauthFlag,
setAccountDisableFlag} Function to callHelp text to use a specific function: [bloodyAD]$ python bloodyAD.py --host 172.16.1.15 -d MYDOM -u myuser -p :70016778cb0524c799ac25b439bd6a31 changePassword -h
usage:
Change the target password without knowing the old one using LDAPS or RPC
Args:
identity: sAMAccountName, DN, GUID or SID of the target (You must have write permission on it)
new_pass: new password for the target

[-h] [func_args ...]

positional arguments:
func_args

optional arguments:
-h, --help show this help message and exitHow it worksbloodyAD communicates with a DC using mainly the LDAP protocol in order to get information or add/modify/delete AD objects. A password cannot be updated with LDAP, it must be a secure connection that is LDAPS or SAMR. A DC doesn't have LDAPS activated by default because it must be configured (with a certificate) so SAMR is used in those cases. autobloodyDescriptionThis tool automate the AD privesc between two AD objects, the source (the one we own) and the target (the one we want) if a privesc path exists. The automation i[...]

s split in two parts:

* pathgen.pyto find the optimal path for privesc using bloodhound data and neo4j queries.
* autobloody.pyto execute the path found with pathgen.pyRequirementsThe following are required:

* Python 3
* DSinternals
* Impacket
* Ldap3
* BloodHound
* Neo4j python driver
* Neo4j with the GDS library How to use itFirst data must be imported into BloodHound (e.g using SharpHound or BloodHound.py) and Neo4j must be running.

Simple usage: pathgen.py -dp neo4jPass -ds 'OWNED_USER@ATTACK.LOCAL' -dt 'TARGET_USER@ATTACK.LOCAL' && autobloody.py -d ATTACK -u 'owned_user' -p 'owned_user_pass' --host 172.16.1.15Full help for pathgen.py: $ python pathgen.py -h
usage: pathgen.py [-h] [--dburi DBURI] [-du DBUSER] -dp DBPASSWORD -ds DBSOURCE -dt DBTARGET [-f FILEPATH]

Active Directory Privilege Escalation Framework

optional arguments:
-h, --help show this help message and exit
--dburi DBURI The host neo4j is running on. Default: localhost.
-du DBUSER, --dbuser DBUSER
Neo4j username to use
-dp DBPASSWORD, --dbpassword DBPASSWORD
Neo4j password to use
-ds DBSOURCE, --dbsource DBSOURCE
Label of the source node
-dt DBTARGET, --dbtarget DBTARGET
Label of the target node
-f FILEPATH, --filepath FILEPATH
File path for the graph path file (default is path.json)Full help for autobloody.py: $ python autobloody.py -h
usage: autobloody.py [-h] [-d DOMAIN] [-u USERNAME] [-p PASSWORD] [-k] [-s {ldap,ldaps,rpc}] --host HOST [--path PATH]

Active Directory Privilege Escalation Framework

optional arguments:
-h, --help show this help message and exit
-d DOMAIN, --domain DOMAIN
Domain used for NTLM authentication
-u USERNAME, --username USERNAME
Username used for NTLM authentication
-p PASSWORD, --password PASSWORD
Cleartext password or LMHASH:NTHASH for NTLM authentication
-k, --kerberos
-s {ldap,ldaps,rpc}, --scheme {ldap,ldaps,rpc}
Use LDAP over TLS (default is LDAP)
--host HOST Hostname or IP of the DC (ex: my.dc.local or 172.16.1.3)
--path PATH Path file (to generate with pathgen.py) How it worksFirst pathgen.pygenerates a privesc path using the Dijkstra's algorithm implemented into the Neo4j's GDS library. The Dijkstra's algorithm allows to solve the shortest path problem on a weighted graph. By default the edges created by bloodhound don't have weight but a type (e.g MemberOf, WriteOwner). A weight is then added to each edge accordingly to the type of the edge and the type of the node reached (e.g user,group,domain).

Once a path is generated and stored as a json file, autobloody.pywill connect to the DC and execute the path and clean what is reversible (everything except password change). Download bloodyAD

Hacking on Medium
Revealing the Importance of White Hat Hacker In Information Security

https://cdn-images-1.medium.com/max/2100/0*7K9PBSfX8u3hO9wp.jpg
In a world where computing has become ubiquitous, and technology drives our lives, information security has become one of the biggest…

Continue reading on Medium »

Hacking on Medium
Write a program to accept a string through the keyboard and display it on the screen.Using

code

Continue reading on Medium »