Hacking Articles Tips Tricks Videos Tutorials
467 subscribers
65.7K photos
15 videos
157 files
131K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
hacking: security in practice
how to hack a hacker?

my instagram got hacked. it’s an account i’ve had for the majority of my life and it holds special memories on it that i can only access through the archive tab. the hacker changed the email associated with the account and i know what that email is. how can i hack back into the account and get it back?

submitted by /u/cutiepie9ccr
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Hacking Articles|Raj Chandel's Blog
Timelapse HackTheBox Walkthrough

SummaryTimelapse is a HTB Active Directory machine is an easy machine but as the concept of initial compromise is unique therefore, I believe it should categories as Intermediate. By solving this lab I learn how can an attacker steal CA certificate to perform lateral moment.Initial Access· NmapPrivilege Escalation· WinPeasInitial AccessNmapFrom the nmap scan, we can see that this is a Window Server more precisely a domain controller since we have DNS, LDAP, Kerberos and SMB ports open.  Also WinRM ( Windows Remote Management) port 5986 is present. SMBClientpfxhashOpensslNow, we are going to convert that pfx file to the hash and crack it using the hash using John to get the private key and the pem key. As you can see, the password is thuglegacy.___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Hacking Articles|Raj Chandel's Blog Timelapse HackTheBox Walkthrough SummaryTimelapse is a HTB Active Directory machine is an easy machine but as the concept of initial compromise is unique therefore, I believe it should categories as Intermediate. By solving…
000/6.png Once the private key available, we can use this key to login on the box. Privilege Escalation Now we have a shell on the box. It seems we don’t have anything in the document library. Let’s browse to the desktop library to see if we can find any flag. Indeed we have a user.txt flag on the desktop. WinPeas.exeOnce installed, lets run updog on 80. As shown below, updog is running on port 80 now. Credential Dumping- LAPSAs we can see from the file, the username is svc_deploy and the password has been assigned to the variable p. now let’s verify in which group the user svc_deploy is a member of. It is a member of the LAPS_Readers group. LAPS stands for Local Administrator Password Solution. It ramdomise all the password for all local machines so that you cannot execute passthehash attack. However, it stores the password on active directory itself and only members of LAPS_Readers can read the password. net users. We found a user account named svc_deploy. Let’s check in which group membership this is located. Its in the LAPS_Readers group. ___________________________
@hacking_Attack
@Hacking_Video