Hacking on Medium
The Simple Formula for Success in Zero Trust

https://cdn-images-1.medium.com/max/1200/1*gCvHJhGTJmMiAraZjHJeRQ.png
The rapid increase in the number of user devices and data moving out of the enterprise perimeter and the zone of control. As a result, the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hackers Have Taken Over An Abandoned Satellite

https://cdn-images-1.medium.com/max/1024/0*yMx_UsG2v21ZCLo1
Karl Koscher and his friends did it by spending only $ 300.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Top API Security Techniques for a Rapidly Changing Attack Surface

https://cdn-images-1.medium.com/max/1005/1*Z3ixgkFYF4G-S9S06XSPQw.jpeg
APIs are a valuable target for hackers. Due to their automated nature, APIs are more susceptible to resource usage and rate limiting…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Active Directory: Post-Compromise Attack — URL File Attack against Writable Share

https://cdn-images-1.medium.com/max/2600/1*POtY2LF8OGBrgjeD_cypNA.jpeg
When the user opens a file share and sees our file it automatically sends us there hash without user interaction.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What does a CHIEF INFORMATION SECURITY OFFICER (CISO) do?

https://cdn-images-1.medium.com/max/1080/1*uvbW6w0JH8lzmVAD8oe1NQ.png
This Cybersecurity role is responsible for the IT Security Strategy of the organization. In this article I will describe the role of the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
EARN MONEY 100% ALL CREDIT CARD TOPUP WU Cashapp TRANSFER BANKS PAYPAL TRANSFER BLANK ATM DUMPS…

ALBERT’S CASH TEAM SERVICE WORLDWIDE(GET RICH NOW/SOLVE ALL PROBLEM NOW)

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
OverTheWire: Bandit wargame (Writeup -Part II)

https://cdn-images-1.medium.com/max/858/1*044LunJrnun4zBEirbkjRQ.png
Check part 1 of this series to understand & solve the next level easily.

Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Need For Ethical Hacking Training

Running a business or personal pursuit online these days isn’t without ingrained challenges. People have now started entering other sites…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hackers use these 4 techniques to crack passwords

One weak password is all hackers need to compromise applications or accounts and access confidential files and data. While cracking…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Masky - Python Library With CLI Allowing To Remotely Dump Domain User Credentials Via An ADCS Without Dumping The LSASS Process Memory

___________________________
@hacking_Attack
@Hacking_Video

My findings on Hack U.S Program

hello everyone myself charan (also know as falcon319) in bug bounty community and i am occasional bug bounty hunter and agriculture…Continue reading on Medium »
[Read more...](https://falcon319.medium.com/my-findings-on-hack-u-s-program-43b692a5c057?source=rss------bugbounty-5)

Masky - Python Library With CLI Allowing To Remotely Dump Domain User Credentials Via An ADCS Without Dumping The LSASS Process Memory
http://www.kitploit.com/2022/08/masky-python-library-with-cli-allowing.html

___________________________
@hacking_Attack
@Hacking_Video

Masky is a python library (https://www.kitploit.com/search/label/Python%20Library) providing an alternative way to remotely dump domain users' credentials thanks to an ADCS. A command line tool has been built on top of this library in order to easily gather PFX, NT hashes and TGT on a larger scope. This tool does not exploit any new vulnerability (https://www.kitploit.com/search/label/Vulnerability) and does not work by dumping the LSASS process memory. Indeed, it only takes advantage of legitimate Windows and Active Directory (https://www.kitploit.com/search/label/Active%20Directory) features (token impersonation, certificate authentication (https://www.kitploit.com/search/label/Authentication) via kerberos & NT hashes retrieval via PKINIT). A blog post (https://z4ksec.github.io/posts/masky-release-v0.0.3/) was published to detail the implemented technics and how Masky works. Masky source code is largely based on the amazing Certify (https://github.com/GhostPack/Certify) and Certipy (https://github.com/ly4k/Certipy) tools. I really thanks their authors for the researches regarding offensive exploitation technics against ADCS (see. Acknowledgments section (https://github.com/Z4kSec/Masky#acknowledgments)).
Installation Masky python3 library and its associated CLI can be simply installed via the public PyPi repository as following: pip install masky
The Masky agent executable is already included within the PyPi package. Moreover, if you need to modify the agent, the C# code can be recompiled via a Visual Studio project located in agent/Masky.sln. It would requires .NET Framework 4 to be built. Usage Masky has been designed as a Python library. Moreover, a command line interface was created on top of it to ease its usage during pentest or RedTeam activities. For both usages, you need first to retrieve the FQDN of a CA server and its CA name deployed via an ADCS. This information can be easily retrieved via the certipy find option or via the Microsoft built-in certutil.exe tool. Make sure that the default User template is enabled on the targeted CA. Warning: Masky deploys an executable on each target via a modification of the existing RasAuto service. Despite the automated roll-back of its intial ImagePath value, an unexpected error during Masky runtime could skip the cleanup phase. Therefore, do not forget to manually reset the original value in case of such unwanted stop. Command line The following demo shows a basic usage of Masky by targeting 4 remote systems. Its execution allows to collect NT hashes, CCACHE and PFX of 3 distincts domain users from the sec.lab testing domain.

___________________________
@hacking_Attack
@Hacking_Video