PowerShell for Pentesting in Kali Linux | Offensive Security
https://www.offensive-security.com/offsec/kali-linux-powershell-pentesting/
https://www.offensive-security.com/offsec/kali-linux-powershell-pentesting/
OffSec
PowerShell for Pentesting in Kali Linux | Offensive Security
In this series, Tony Punturiero (TJ Null) will be showing how to use PowerShell on Kali Linux to obtain initial access with PSSession on Windows and Linux.
Proxyjump, the SSH option you probably never heard of
https://medium.com/maverislabs/proxyjump-the-ssh-option-you-probably-never-heard-of-2d7e41d43464
https://medium.com/maverislabs/proxyjump-the-ssh-option-you-probably-never-heard-of-2d7e41d43464
Medium
Proxyjump, the SSH option you probably never heard of
Today, it is becoming more and more common for Penetration Testers, Security Researchers, Red Teams, and the like to require some sort of…
GitHub - mhaskar/CVE-2020-14947: The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947
https://github.com/mhaskar/CVE-2020-14947
https://github.com/mhaskar/CVE-2020-14947
GitHub
GitHub - mhaskar/CVE-2020-14947: The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947
The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947 - mhaskar/CVE-2020-14947
nccfsas/Tools/spoolsystem at main · nccgroup/nccfsas · GitHub
https://github.com/nccgroup/nccfsas/tree/main/Tools/spoolsystem
https://github.com/nccgroup/nccfsas/tree/main/Tools/spoolsystem
GitHub
nccfsas/Tools/spoolsystem at main · nccgroup/nccfsas
Information released publicly by NCC Group's Full Spectrum Attack Simulation (FSAS) team. - nccgroup/nccfsas
Reverse Engineering Malware, Part 4: Windows Internals
https://www.hackers-arise.com/single-post/2017/07/04/Reverse-Engineering-Malware-Part-4-Windows-Internals
https://www.hackers-arise.com/single-post/2017/07/04/Reverse-Engineering-Malware-Part-4-Windows-Internals
hackers-arise
Reverse Engineering Malware, Part 4: Windows Internals
Welcome back to my Reverse Engineering Malware series. In general, reverse engineering of malware is done on Windows systems. That's because despite recent inroads by Linux and the Mac OS, Windows systems still comprise over 90% of all computing systems in…
Fuzzing FastCGI With AFL-Fuzz. This is the very long tale of my… | by Omaid Faizyar | Jul, 2020 | Medium
https://medium.com/@omaidfaizyar/fuzzing-fastcgi-an-odyssey-4ffc1c72a732
https://medium.com/@omaidfaizyar/fuzzing-fastcgi-an-odyssey-4ffc1c72a732
Medium
Fuzzing FastCGI With AFL-Fuzz
This is the very long tale of my adventures in fuzzing FastCGI with AFL-Fuzz. If you’re interested in fuzzing a FastCGI binary, look no…
Quick list of some app whitelist bypasses to try..
forfiles /p c:\windows\system32 /m notepad.exe /c <bin>
explorer.exe /root,"<bin>"
pcalua.exe -a <bin>
scriptrunner.exe -appvscript <bin>
wmic process call create <bin>
rundll32.exe advpack.dll, RegisterOCX <bin>
forfiles /p c:\windows\system32 /m notepad.exe /c <bin>
explorer.exe /root,"<bin>"
pcalua.exe -a <bin>
scriptrunner.exe -appvscript <bin>
wmic process call create <bin>
rundll32.exe advpack.dll, RegisterOCX <bin>
Top 16 Active Directory Vulnerabilities - InfosecMatter
https://www.infosecmatter.com/top-16-active-directory-vulnerabilities/
https://www.infosecmatter.com/top-16-active-directory-vulnerabilities/
InfosecMatter
Top 16 Active Directory Vulnerabilities - InfosecMatter
Practical steps on how to pentest Active Directory environments using a list of most common AD vulnerabilities. Tools and command examples for testing and exploitation of AD vulnerabilities.
AD Attack
1) Performing domain recon using PS
https://t.co/Pt6VpJqGdO
2) Attack mapping with bloodhound
https://t.co/CpmB4XW3pq
3) Extracting passwd hashes
https://t.co/f55XUSyx1k
4) Pass-the-hash attacks with mimikatz
https://t.co/PPkBjPpVgK
1) Performing domain recon using PS
https://t.co/Pt6VpJqGdO
2) Attack mapping with bloodhound
https://t.co/CpmB4XW3pq
3) Extracting passwd hashes
https://t.co/f55XUSyx1k
4) Pass-the-hash attacks with mimikatz
https://t.co/PPkBjPpVgK
Stealthbits Technologies
Performing Domain Reconnaissance Using PowerShell
In this post, we will cover a few of the different ways that PowerShell can be used by attackers to map out your environment and chose their targets.
HTTP(s) C2 Pivoting. Introduction | by Steve Borosh | Jul, 2020 | Medium
https://medium.com/@rvrsh3ll/offensive-internal-http-s-agent-pivoting-2e9b4b7e58d8
https://medium.com/@rvrsh3ll/offensive-internal-http-s-agent-pivoting-2e9b4b7e58d8
Medium
Offensive Internal HTTP(s) Agent Pivoting
Introduction