Hacking Articles Tips Tricks Videos Tutorials

Often a Red Team (https://www.kitploit.com/search/label/Red%20Team) engagement is more than just achieving Domain Admin. Some clients will want to see if specific users in the domain can be compromised, for example the CEO. SharpSniper is a simple tool to find the IP address of these users so that you can target their box. It requires that you have privileges to read logs on Domain Controllers. First it queries and makes a list of Domain contollers, then search for Log-on events on any of the DCs for the user you are looking for and then reads the most recent DHCP allocated logon (https://www.kitploit.com/search/label/Logon) IP address. N.B. Build can also target .net framework v3.5 if needed.
Usage cmd.exe (Supply credentials) C:\> SharpSniper.exe emusk DomainAdminUser DAPass123

User: emusk - IP Address: 192.168.37.130
cmd.exe (Current authentication (https://www.kitploit.com/search/label/Authentication) token e.g. Mimikatz pth) C:\> SharpSniper.exe emusk

User: emusk - IP Address: 192.168.37.130
Cobalt Strike (Supply credentials) > execute-assembly /path/to/SharpSniper.exe emusk DomainAdminUser DAPass123

User: emusk - IP Address: 192.168.37.130
Cobalt Strike (Beacon's token) > execute-assembly /path/to/SharpSniper.exe emusk

User: emusk - IP Address: 192.168.37.130
Author Tom Kallo

Download SharpSniper (https://github.com/HunnicCyber/SharpSniper)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.

5 viewsedited 22:56

Hacking Articles Tips Tricks Videos Tutorials

5 views23:13

Hacking Articles Tips Tricks Videos Tutorials

Photo

KitPloit - PenTest Tools!
SharpSniper - Find Specific Users In Active Directory Via Their Username And Logon IP Address

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwVWfuzYRc9tPYetIUa59KyGLxqXLu4ksg-tZ4bT7_Cua7dtY4IlAjxbgIDso5iQOV0SbkTEaIcnnM5ySP9Q3TQ1u478NG4P5uhftfLz-hOUrIWGD6pypvJbuxJchOJL-TqRwg1EcaGkUyw6XaQRGULlmCyKkNRH5gbocF-b3JVu3Vg7LcS6GN3qVB/w640-h528/Active%20Directory.png
Often a Red Team engagement is more than just achieving Domain Admin. Some clients will want to see if specific users in the domain can be compromised, for example the CEO.

SharpSniper is a simple tool to find the IP address of these users so that you can target their box.

It requires that you have privileges to read logs on Domain Controllers.

First it queries and makes a list of Domain contollers, then search for Log-on events on any of the DCs for the user you are looking for and then reads the most recent DHCP allocated logon IP address.

N.B. Build can also target .net framework v3.5 if needed.
Usage

cmd.exe (Supply credentials)

C:\> SharpSniper.exe emusk DomainAdminUser DAPass123

User: emusk - IP Address: 192.168.37.130

cmd.exe (Current authentication token e.g. Mimikatz pth)

C:\> SharpSniper.exe emusk

User: emusk - IP Address: 192.168.37.130

Cobalt Strike (Supply credentials)

> execute-assembly /path/to/SharpSniper.exe emusk DomainAdminUser DAPass123

User: emusk - IP Address: 192.168.37.130

Cobalt Strike (Beacon's token)

> execute-assembly /path/to/SharpSniper.exe emusk

User: emusk - IP Address: 192.168.37.130

Author

Tom Kallo
Download SharpSniper

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

SharpSniper - Find Specific Users In Active Directory Via Their Username And Logon IP Address

5 viewsedited 23:13

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Best VPN to use?

If money isnt a issue , which would you suggest is best.thanks

submitted by /u/RepresentativeEgg511
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Best VPN to use?

If money isnt a issue , which would you suggest is best.thanks

5 viewsedited 01:20

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Has anyone had good result with the adjective-noun-3# pass list, against spectrum? The wordlist resides in the wiki of this subreddit.

I have downloaded it and plan on using it on my home connection after pw reset. I’m not 100% but I’m almost certain the list is not every possible combination. It’s only 4.1gb (massive) but with the format you’d think it’d be bigger, could be wrong.

I’m solely asking for educational purposes, and plan to promote good practices within the people I know.

I’m curious on the effectiveness, and If applicable, the amount of time it took to run through the entire list if it has been done.

Lmk if you have questions.

Thank you in advance :)

submitted by /u/Inner-Tie-9528
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Has anyone had good result with the adjective-noun-3# pass list,...

I have downloaded it and plan on using it on my home connection after pw reset. I’m not 100% but I’m almost certain the list is not every possible...

5 viewsedited 01:20

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Is there a place where I can find someone?

I know this community has a rule about no asking for someone to hack into an account and this isn't what I'm asking. Does anyone know a person or website where I can find a phone number or email attached to a scammers account? DM me if you do, I got an idea

submitted by /u/Fang696
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Is there a place where I can find someone?

I know this community has a rule about no asking for someone to hack into an account and this isn't what I'm asking. Does anyone know a person or...

6 viewsedited 01:20

Hacking Articles Tips Tricks Videos Tutorials

7 views02:56

Hacking Articles Tips Tricks Videos Tutorials

9 views02:56

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
Создаем свой терминал в Google Colab для работ в GitHub, GDrive, NGrok и.т.д

https://cdn-images-1.medium.com/max/614/0*rYjMqgu3YF9lCI9p.png
В настоящее время машинное обучение и глубокое обучение стали самой горячей тенденцией в индустрии компьютерных наук. Многие разработчики…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

Создаем свой терминал в Google Colab для работ в GitHub, GDrive, NGrok и.т.д

В настоящее время машинное обучение и глубокое обучение стали самой горячей тенденцией в индустрии компьютерных наук. Многие разработчики…

9 viewsedited 02:56

Hacking Articles Tips Tricks Videos Tutorials

Photo

Hacking on Medium
6 Suspicious Things To Look Out for in Emails

https://cdn-images-1.medium.com/max/2600/1*7iqxdNjnydg1wM6f7uIwMQ.jpeg
Avoiding Phishing Attacks in the Digital World

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Medium

6 Suspicious Things To Look Out for in Emails

Avoiding Phishing Attacks in the Digital World

6 viewsedited 02:56

Hacking Articles Tips Tricks Videos Tutorials

7 views05:19

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Without adequate authentication for admin page of Multi-Function Printer, the MFPs admin page has become a major target for data breaches. Analysis report on data lekage due to Multi-Function Printer vulnerability.

https://external-preview.redd.it/Ai6EGga_0Fp2cn9jIDJvhn1W6E7LUrrK_Rkb2R2U9L8.jpg?width=640&crop=smart&auto=webp&s=d2e5fe4ea83d4b66303a3fc9d659d4b44ae954db submitted by /u/Late_Ice_9288
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Without adequate authentication for admin page of Multi-Function...

Posted in r/hacking by u/Late_Ice_9288 • 1 point and 0 comments

7 viewsedited 05:19

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
There's a group of hackers holding hostage most Ubisoft account names.

They use bots to auto create accounts with names by a certain number of characters. They pull accounts with rare skins and sell them at high value.

My friends and I are annoyed because we can't have names without dots and dashes.

How are these guys doing this? What can I do about it?

submitted by /u/aGuyOnTheMoon
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

There's a group of hackers holding hostage most Ubisoft account names.

They use bots to auto create accounts with names by a certain number of characters. They pull accounts with rare skins and sell them at high...

5 viewsedited 05:19

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Phishing site URL sent to my phone is inaccessible to my PC. What's the deal?

So a scammer sent a link for an old bank account designed to phish my credentials. I can access it from my phone and it pops up as my former banks login screen. Now when I go to scan the URL with my PC, it doesn't exist. I first tried pinging the URL and then traceroute, nmap, metasploit, a few more etc... None pull up an IP/server. Nothing found. The URL is 100% without typo. I haven't been involved in pentesting or netsec in a few years and am wondering what the deal is. What's changed? Why am I able to access the URL from the text message on my phone but not my PC? It's a .php site. What am I missing? This is a new encounter for me.

submitted by /u/Day2Late
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Phishing site URL sent to my phone is inaccessible to my PC....

So a scammer sent a link for an old bank account designed to phish my credentials. I can access it from my phone and it pops up as my former banks...

4 viewsedited 05:19

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Freaked out…

Help .. so freaked out.

Middle of WhatsApp chat conversation with my sister she says did you just send a pic it disappeared? It happened once last week also? Is this a glitch or has she or I been hacked? So creeped out.

submitted by /u/rockandharderplace
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Freaked out…

Help .. so freaked out. Middle of WhatsApp chat conversation with my sister she says did you just send a pic it disappeared? It happened once...

4 viewsedited 05:19

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
Free and Anonymous VOIP services

Are there any free and Anonymous VOIP services which offer phone numbers for use without asking for any personal information. The free part is not 100% necessary but would be preferable. I basically want a burner phone number which I can use to login to sites which require a phone number for verifying identity. I do not wish to give away my actual phone number to some less than trustworthy sites which I might need to visit.

submitted by /u/juggernaut_2000
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Free and Anonymous VOIP services

Are there any free and Anonymous VOIP services which offer phone numbers for use without asking for any personal information. The free part is not...

4 viewsedited 05:20

Hacking Articles Tips Tricks Videos Tutorials

4 views06:17

Hacking Articles Tips Tricks Videos Tutorials

Photo

Kali Linux Tutorials

GraphqlThreatMatrix : GraphQL Threat Framework

graphql-threat-matrix was built for bug bounty hunters, security researchers and hackers to assist with uncovering vulnerabilities.

4 viewsedited 06:17

Hacking Articles Tips Tricks Videos Tutorials

3 views06:17

Hacking Articles Tips Tricks Videos Tutorials

Photo

Kali Linux Tutorials
Malicious-Pdf : Generate A Bunch Of Malicious Pdf Files With Phone-Home Functionality

Malicious-Pdf Generate ten different malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

Used for penetration testing and/or red-teaming etc. I created this tool because i needed a third party tool to generate a bunch of PDF files with various links.

Usage

python3 malicious-pdf.py burp-collaborator-url

Output will be written as: test1.pdf, test2.pdf, test3.pdf etc in the current directory.

Do not use the https:// etc prefix on the url argument.

Purpose

* Test web pages/services accepting PDF-files
* Test security products
* Test PDF readers
* Test PDF converters
Download

___________________________
@hacking_Attack
@Hacking_Video

Kali Linux Tutorials

Malicious-Pdf : Generate A Bunch Of Malicious Pdf Files

Malicious-Pdf Generate ten different malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

3 viewsedited 06:17

Hacking Articles Tips Tricks Videos Tutorials

Kali Linux Tutorials Graphql-Threat-Matrix : GraphQL Threat Framework Used By Security Professionals graphql-threat-matrix was built for bug bounty hunters, security researchers and hackers to assist with uncovering vulnerabilities across multiple GraphQL…

4 views06:17

About

Blog

Apps

Platform