Hacking Articles Tips Tricks Videos Tutorials

Kali Linux Tutorials
Kerberoast : Kerberoast Attack -Pure Python-

Kerberoast attack toolkit -pure python

Install

pip3 install kerberoast

Prerequirements

Python 3.6 See requirements.txt For the impatient

IMPORTANT: the accepted target url formats for LDAP and Kerberos are the following : : Steps -with SSPI-: kerberoast auto Steps -SSPI not used-:

* Look for vulnerable users via LDAP

kerberoast ldap all * Use ASREP roast against users in the ldapenum_asrep_users.txtfile kerberoast asreproast * Use SPN roast against users in the ldapenum_spn_users.txtfile kerberoast spnroast * Crack SPN roast and ASPREP roast output with hashcat Commands ldap

This command group is for enumerating potentially vulnerable users via LDAP. Command structure kerberoast ldap Type: It supports three types of users to be enumerated

* spnEnumerates users with servicePrincipalNameattribute set.
* asrepEnumerates users with DONT_REQ_PREAUTHflag set in their UAC attribute.
* allStartes all the above mentioned enumerations. ldap_connection_url: Specifies the usercredential and the target server in the msldap url format (see help) options: -o: Output file base name brute

This command is to perform username enumeration by brute-forcing the kerberos service with possible username candidates Command structure kerberoast brute realm: The kerberos realm usually looks like COMPANY.corpdc_ip: IP or hostname of the domain controller targets: Path to the file which contains the possible username candidates options: -o: Output file base name asreproast

This command is to perform ASREProast attack Command structure kerberoast asreproast dc_ip

: IP or hostname of the domain controller options: -r: Specifies the kerberos realm to be used. It overrides all other realm info. -o: Output file base name -t: Path to the file which contains the usernames to perform the attack on -u: Specifies the user to perform the attack on. Format is either or

but in the first case, the -roption must be used to specify the realm spnroast

This command is to perform SPNroast (AKA kerberoast) attack. Command structure kerberoast spnroast kerberos_connection_url

: Specifies the usercredential and the target server in the kerberos URL format (see help) options: -r: Specifies the kerberos realm to be used. It overrides all other realm info. -o: Output file base name -t: Path to the file which contains the usernames to perform the attack on -u: Specifies the user to perform the attack on. Format is either or but in the first case, the -roption must be used to specify the realm Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

Kerberoast : Kerberoast Attack -Pure Python- !!! Kali Linux

Kerberoast attack toolkit -pure python. IMPORTANT: the accepted target url formats for LDAP and Kerberos are the following.

12 viewsedited 17:56

Hacking Articles Tips Tricks Videos Tutorials

10 views18:45

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Linkedin Account Generator

I am writing a script to generate linkedin account for digital makerting , I am in testing phase, so I created various accounts manually with different cellphone sms verification numbers, but days after that without any actions, all these accounts are blocked with restricctions including my original account, I need to upload an real ID document to recovery each of them, Does anybody knows how Microsoft/ Linkedin known these accounts are 'fakes' and how linked with my original account? I am thinking about use diferent proxies to manage my accounts, but I donot know if i am right? And how to bypass this posible detection.

submitted by /u/happygroweed
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

From the hacking community on Reddit

Explore this post and more from the hacking community

11 viewsedited 18:45

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Explained: The OpenSea NFT Listing Vulnerability

https://external-preview.redd.it/4TcJsI4xV3GkJta_amRNS-Lv_dIgfbNHe1bfpT2_4BI.jpg?width=640&crop=smart&auto=webp&s=afcbd0a97708f5b4139f3739dcd01aadad3789f9 submitted by /u/joe691013
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Explained: The OpenSea NFT Listing Vulnerability

Posted in r/hacking by u/joe691013 • 1 point and 0 comments

12 viewsedited 18:45

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Private hacking eviroment

Hey guys, how would you aproach creating really private hacking enviroment? I thought about QubesOs hacking but i think it would be kinda painfull, also thought about creating Hacking vm's inside of base Debian Os and wiping them weekly, but yeah i've gotta grab some ideas on how to aproach it with it actually being practical.

submitted by /u/Mtay___
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Private hacking eviroment

Hey guys, how would you aproach creating really private hacking enviroment? I thought about QubesOs hacking but i think it would be kinda...

14 viewsedited 18:45

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Password database dumps

are there places where password database dumps are available for download? I would love to do some of my own analysis.

submitted by /u/Omgfunsies
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Password database dumps

are there places where password database dumps are available for download? I would love to do some of my own analysis.

11 viewsedited 18:46

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Navigating Nobelium: Lessons From Cloud Hopper & NotPetya

Nearly every organization should assume that it is at risk, but there are ways of countering the tactics used by advanced persistent threats.

10 views18:46

Source

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
The Looming CISO Mental Health Crisis — and What to Do About It, Part 1

The next big threat to corporate security may not be a new strain of malware or innovative attacker tactics, techniques, and processes. It may be our own mental health.

11 views18:46

Source

Hacking Articles Tips Tricks Videos Tutorials

11 views18:58

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Friendly reminder creationism is not new.

https://external-preview.redd.it/mWPahFPkqB5DXeQmNJEp14Xqf82AEgpsJhCzOHhpJ-A.jpg?width=320&crop=smart&auto=webp&s=61d82019a4d1d757be776ede94c6ab62acb23dee submitted by /u/Omgbomber
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Friendly reminder creationism is not new.

Posted in r/hacking by u/Omgbomber • 1 point and 0 comments

13 viewsedited 18:59

Hacking Articles Tips Tricks Videos Tutorials

12 views20:43