Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
HACKER

I would like to introduce you guys to this proficient hacker, although I have been used many times on this platform by fake hackers who…

Continue reading on Medium »
hacking: security in practice
finding info on phone number?

my friend is being harassed and stalked by someone hidden behind a random phone number. I want to find out who this person is so he can have some peace of mind. I can't find any information attached to this phone number. I'm worried that it may be spoofed. anyway I can get more info on who is behind this?

submitted by /u/ParkingReflection758
[link] [comments]
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking on Medium
TryHackMe — CyberHeroes

https://cdn-images-1.medium.com/max/1263/1*WZwPbm69skTtDzoCUTIUQg.png
CyberHeroes is a CTF with “Easy” difficulty on TryHackMe. In order to get the flag, you have to bypass the authentication mechanisms of…

Continue reading on Medium »
hacking: security in practice
Issues with Kerberos constrained delegation and DCSync attack

Hi all,

I am trying to perform a dcsync attack through a kerberos constrained delegation machine in my homelab. I created a server with constrained delegation for time/dc01 and I noted the NTLM hash for the server with constrained delegation.

With rubeus I am able to get tickets for alternate services with:

.\rubeus.exe s4u /user:srv-constrained$ /rc4:NTLM-HASH /impersonateuser:administrator msdsspn:time/dc01.domain.local /altservice:ldap /ptt

I see I have a ticket for the ldap service so I run the dcsync like:

Invoke-mimikatz -Command '"lsadump::dcsync /user:domain\krbtgt"'

Whenever I do this I get an error:

ERROR kuhl_m_lsadump_dcsync ; GetNCChanges: 0x000020f7 (8439)

I completely redeployed my homelab but keep getting the same error.

When I request a ticket for CIFS I do get access to the filesystem. A ticket for HTTP does not allow me to use enter-pssession and a HOST ticket does not allow me to create a scheduled task.

Multiple tutorials tell me my commands should work but I must be doing something wrong I guess.

submitted by /u/Advanced-Chain4096
[link] [comments]