Collaborate Disseminate
I recently learned about the feature in Windows 10 called Windows Secure Mode (https://learn.microsoft.com/en-us/virtualization/hyper-v-on-windows/tlfs/vsm). I’m trying to understand what exactly it is trying to achieve by sandboxing itsel… Continue reading What is Virtual Secure Mode trying to achieve?
While learning about pentesting most of the time I have used the python3 -m http.server [PORT] command to spin up a temporary http server in order to transfer files to a target system. However as I am progressing and moving beyond the basi… Continue reading How to set up a simple HTTPS server for pentesting [closed]
I’m learning Active Directory attacks and in one of the labs we are given the example of gaining the initial foothold in an AD system via NetNTLM by performing a password spraying attack. For the purpose of the lab we are given a custom py… Continue reading Using Hydra on a NTLM authentication
I am working on a CTF called Internal. I know there are walkthroughs available but I am trying not to look at them for the time being and try and work through things myself. The admin page that is the apparent target is http://10.10.240.10… Continue reading Server Side Request Forgery Vulnerability Question
I came across a strange group policy setup once and was wondering if anyone can make sense of it. We were NOT allowed to run executables that were stored on the local disk or network drives, but we could run executables that were on a USB … Continue reading Difference between running executable from disk vs removable media
My partner recently got given work laptop and if you try and put in a USB mass storage device you get an error saying it is not allowed. Without having administrator access I assume this is via the group policy All Removable Storage Classe… Continue reading Methods to bypass Windows security policy: All Removable Storage Classes – Deny All Access
This is going to sound really stupid but I’m going out of my mind trying to figure it out. I am using Netcat to test a connection to a web server as follows:
nc 10.10.1.1 80
Now when I try to send a GET request header I need to send:
GET … Continue reading Creating a new line on Netcat without sending the request [closed]
I’m curious in an enterprise network running Windows, what information is available in the SAM of a standard user’s endpoint machine?
I understand (and correct me if I’m wrong) that when logging in to a network managed by AD that an endpoi… Continue reading What information is contained in the local SAM in an Active Directory network
A website allocates random file names to uploads and I am trying to enumerate through the folder that the files are uploaded to using Gobuster.
I know the extension of my file type, but not the file name. Is there a way to invoke the -x fl… Continue reading How to search for any file with a specified extension using Gobuster
I am doing some research into scam websites (particularly the ones where you receive a text message telling you you have an undelivered package, or unpaid tolls etc and they provide you with a link to click).
I am using Burp Suite to look … Continue reading What sort of cookie is this website giving users