Hacking Articles|Raj Chandel's Blog
Active Directory Enumeration: BloodHound

In the article, we will focus on the Active Directory Enumeration tool called BloodHound. It takes the data from any device on the network and then proceeds to plot the graph that can help the attacker to strategize their way to the Domain Admins. Table of Content· IntroductionIntroductionBloodHound is programmed to generate graphs that reveal the hidden and relationships within an Active Directory Network. BloodHound also supports Azure. BloodHound enables the Attackers to identify complex attack paths that would otherwise be not possible to identify. The Blue Team can use BloodHound to identify and fix those same attack patterns. Linux Installation Some multiple guides and methods can help you set up and install bloodhound on your host machine. We will be following the official documents of BloodHound that can be found on their GitHubbut refining the process. As always before installing any tool on your Linux Machine, it is recommended to perform an update and upgrade your software packages. Also, for any reason, if you don’t have Java installed, install java to continue. We won’t be installing java as we are working on Kali Linux which comes preinstalled with Java. Configuring Bloodhound is a 3-step process. BloodHound has a GUI and Data scrapper and neo4j Database. This means that we need to configure them individually. We start with the Bloodhound GUI which can be installed directly using the apt command. apt install bloodhound neo4j console ___________________________
@hacking_Attack
@Hacking_Video

the neo4j service up and running, we can run the Bloodhound GUI. Running it is a simple task of typing bloodhound on your terminal and hitting Enter key. You can also try to look for bloodhound in your list of installed applications in the menu of Kali Linux and run it directly from there. pip3 install bloodhound Extracting Data from DomainWe will run the python Bloodhound that we just installed using pip3 and extract the data from the Domain. It is a good time to mention that here the Domain setup is in such a way that we have connected the Domain Controller, Clients, and our Attacker Machine essentially in the same network. To get data from the Domain, any user can be used. We will be using the Administrator account to extract maximum data for this enumeration. In a realistic scenario, you will end up with a normal user and then you will run the bloodhound and then use the data enumerated to get to the Administrator. We need to provide the following parameters to extract data from Domain: username, password, Name Server (IP Address of Domain Controller), Domain and Data we want to extract (We are using “All” to extract maximum data from the Domain). The data extracted will be in the form of .json files that will be created based on the queries that ran across the Domain in search of possible paths and permissions of various groups and users. bloodhound-python -u administer -p Ignite@987 -ns 192.168.1.172 -d ignite.local -c All ___________________________
@hacking_Attack
@Hacking_Video

NT09y6gRV54FUm4MeT5KwcaDQCLcBGAsYHQ/s16000/10.png Enumerating with BloodHoundLet’s begin our enumeration with the Pre-Built Analytics Queries. First of them that we use is the Find all Domain Admins. This Query will fetch all the Domain Admins it can find in its database and plot them on the graph as shown in the image below. Since our Domain has only one Domain Admin, it shows one node and then for 2 groups under that Domain Admin. Learn More: AS-REP Roasting ___________________________
@hacking_Attack
@Hacking_Video

Hacking Articles|Raj Chandel's Blog
Active Directory Enumeration: BloodHound

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hack The Box — Bastard: Walkthrough (without Metasploit)

https://cdn-images-1.medium.com/max/600/1*9u9NvVkQVOE0hqVLjtT8VQ.png
Hack The Box — Bastard: Walkthrough (without Metasploit) | Windows Medium Level | DrupalGeddon2 | JuicyPotato | Window Enumeration | Drupal

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
Vaf - Very Advanced (Web) Fuzzer

https://1.bp.blogspot.com/-MGnCnN7YPqU/YIxWCWXTjWI/AAAAAAAAWBM/G6LCKOFIY3kSjg1sfWmuTab560zNdEDoQCNcBGAsYHQ/w640-h336/vaf_1_main%252520without%252520pu.png
very advanced fuzzer

compiling

1. Install nim from nim-lang.org
2. Run

nimble build

A vaf.exe file will be created in your directory ready to be used
using vaf

using vaf is simple, here's the current help text:
Usage:
vaf - very advanced fuzzer [options]

Options:
-h, --help
-u, --url=URL choose url, replace area to fuzz with []
-w, --wordlist=WORDLIST choose the wordlist to use
-sc, --status=STATUS set on which status to print, set this param to 'any' to print on any status (default: 200)
-pr, --prefix=PREFIX prefix, e.g. set this to / for content discovery if your url doesnt have a / at the end (default: )
-sf, --suffix=SUFFIX suffix, e.g. use this for extensions if you are doing content discovery (default: )
-pd, --postdata=POSTDATA only used if '-m post' is set (default: {})
-m, --method=METHOD suffix, e.g. use this for extensions if you are doing content discovery (default: get)
-pif, --printifreflexive print only if the output reflected in the page, useful for finding xss
-ue, --urlencode url encode the payloads
-pu, --printurl prints the url that has been requested

screenshots
https://1.bp.blogspot.com/-7q8tPuUPhcw/YIxWJPLZc2I/AAAAAAAAWBQ/oHNNYwKEOfAUlzYqxB4PJNrGkEmJmPolACNcBGAsYHQ/w640-h336/vaf_1_main%252520without%252520pu.png
(with every status code printed, suffixes .php,.html and no prefixes)
https://1.bp.blogspot.com/-MN-GlqFmYIY/YIxWMHppnjI/AAAAAAAAWBU/BKut-ij4YYggpAD__HKiAxAtkm-DHXL-wCNcBGAsYHQ/w640-h320/vaf_2_main.png
(with url printed, every status code printed, suffixes .php,.html and no prefixes)
https://1.bp.blogspot.com/-wT5a1rwOg1k/YIxWPl_0sUI/AAAAAAAAWBY/lHQxtrKBYUcywhl6YRYN_8Rw4rv2AIRaQCNcBGAsYHQ/w640-h210/vaf_3_main%252520post.png
(post data fuzzing)

examples

Fuzz post data:
vaf.exe -w example_wordlists\short.txt -u https://jsonplaceholder.typicode.com/posts -m post -sc 201 -pd "{\"title\": \"[]\"}"

Fuzz GET URLs
vaf.exe -w example_wordlists\short.txt -u https://example.org/[] -sf .html

tips

* Add a trailing ,in the suffixes or prefixes argument to try the word without any suffix/prefix like this: -pf .php,or -sf .php,
* Use -pifwith a bunch of xss payloads as the wordlist to find XSS
* Make an issue if you want to suggest a feature
Download Vaf

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Skills Required to be a Hacker | 2021 Hacking Course Free

https://cdn-images-1.medium.com/max/602/0*5yRpQqk5WbzB0grE
Hacking is one of the hottest professions in this decade, but don’t make it an easy task. You must have a deep knowledge of computer…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Download Free Courses
Learn Modern JavaScript: Advanced Topics with Steven Hancock

https://s3.eu-central-1.wasabisys.com/courseupload/2021/04/Screen-Shot-2021-04-26-at-11.23.23-AM.png Learn Modern JavaScript: Advanced Topics with Steven Hancock — SkillShare — Free download
Advanced Topics picks up where the Getting Started course ended. You should now have some experience with JavaScript and understand the JavaScript language much better. Therefore, you are ready to learn more of the nuances and important patterns that advanced JavaScript developers know and use.

In Learn Modern JavaScript: Advanced Topics, we explore the more advanced techniques in JavaScript. You learn advanced concepts for objects and functions, the value of ‘this’, the power of functions using closure and IIFEs. You learn about the namespace and module patterns. You learn JSON and how to load a JSON file. You will follow along as we apply OOP concepts to a project. You get very familiar with the prototype, and these are just the main topics covered in this advanced course. A new bonus section helps you get familiar with functional programming concepts in JavaScript.

This course contains 15 sections and one bonus section, over 90 different lectures, over 17 hours of video, 4 quizzes, 9 assignments, 1 large project and several Think Like a Programmer sections with invaluable information for those intent on making JavaScript a career choice or a major part of their lives.

If you want to improve your JavaScript skills, this course is for you!
DOWNLOAD
https://sundryshare.com/themes/flow/images/file_icons/32px/rar.png Learn-Modern-JavaScript-Advanced-Topics.part1.rar  (2.93 GB)
sundryshare.com/1TM5 https://sundryshare.com/themes/flow/images/group.png https://sundryshare.com/themes/flow/images/download_icon.png https://sundryshare.com/themes/flow/images/file_icons/32px/rar.png Learn-Modern-JavaScript-Advanced-Topics.part2.rar  (21.68 MB)
sundryshare.com/1TM6 https://sundryshare.com/themes/flow/images/group.png https://sundryshare.com/themes/flow/images/download_icon.png
Course Content: https://www.skillshare.com/classes/Learn-Modern-JavaScript-Advanced-Topics/1710411551

hacking: security in practice
Wordpress hacking security and malware

I want to learn how to hack Wordpress and privilege escalation or dumping the database, I host my own Wordpress and I’ve had not attacks, malware and I just want to learn Wordpress hacking and how to tighten security because it seems that with every update comes a new exploit or vulnerability and it’s like whack a mole.

I tried Metaspolit and wp scanner but not had much success with them. I was going to build a dedicated Linux box to carry out Wordpress hacking and I would only ever use it against my own systems

submitted by /u/stayjuicecom
[link] [comments]

hacking: security in practice
Is python the only language for hacking?

I want to learn new languages but which language should I learn I am unaware.

submitted by /u/Muted-beast
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
XPOST : SACA Technolgoies/ IronOrbit MSP breached.

submitted by /u/slowz3r
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Languages for learn ethical hacking

https://cdn-images-1.medium.com/max/640/1*ESxT3U3u95ftlowqt6Fl0w.jpeg
As shown by the remarkable progress in regenerating positions, battles, APIs, diagrams, programs, and that, we need to use common, basic…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Tryhackme | Lazy Admin

What’s worse than an admin? A lazy admin! This is easy level tryhackme room that exploits bad practices and weak passwords.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Quedtion about Samy kamkar's myspace hack

A lot of you probably know about when he created a bug on myspace and that whole thing. I have been reading up on it but am trying to find images. I have seen two, 1 with his follower count with kick ass and i rule from samy's sight. The other one is a search result that says "samy is my hero" in every result. Does anyone know of anymore pictures as i want to do a project on this and i kinda need more pics. Any help is greatly appreciated

submitted by /u/__babygiraffe__
[link] [comments]