Collaborate Disseminate
Currently looking for a way to prevent unauthenticated user enumeration on a Domain Controller. This is a security precaution I’d like to implement, next to the existing measures taken prevent unauthorized DC access.
Kerbrute states the fo… Continue reading Is it possible to prevent Kerbrute from unauthenticated user enumation Active Directory?
When conducting an external pentest and the scope is broad covering everything owned by the client, how would you verify if the enumerated IP addresses belong to a client? Running ‘nslookup’ on the IP doesn’t always return anything and in … Continue reading Verifying IP addresses during pentest
I would like to enumerate all possible PGP e-mails related to North Korean top-level domain .kp
Few years ago I would have used theHarvester but I recently discovered that this useful tool doesn’t support PGP keyring search any more 🙁
If … Continue reading How to enumerate PGP keyring e-mails related to a specific ccTLD
I used nmap on my target server which returns the following services
PORT STATE SERVICE VERSION
53/tcp open domain?
80/tcp open http Microsoft IIS httpd 10.0
88/tcp open kerberos-sec Microsoft Windows Kerberos … Continue reading How to identify actual service running on a port on a remote server via the terminal?
I used nmap on my target server which returns the following services
PORT STATE SERVICE VERSION
53/tcp open domain?
80/tcp open http Microsoft IIS httpd 10.0
88/tcp open kerberos-sec Microsoft Windows Kerberos … Continue reading How to identify actual service running on a port on a remote server via the terminal?
I work at a company that provides a SaaS program for other organizations, and each subscribed organization receives their own subdomain of their choosing – generally they choose the organization name. We recently discovered that there are … Continue reading Rate Limit DNS Subdomain Requests
I’m scanning a machine that has the UDP port 161 open and I’m not able to run snmpwalk against it as I’m returned with the error:
Timeout: No Response from <IP>
I tried to run the onesixtyone tool to bruteforce the community string … Continue reading SNMP Enumeration
Let’s consider this scenario.
If I browse to https://www.example.com/existentdirectory the web application shows this error "directory listing is denied".
If I browse to https://www.example.com/nonexistentdirectory the web applic… Continue reading Directories enumeration by errors. CVSS3.1 and remediation
AutoRecon is a multi-threaded network reconnaissance tool which
performs automated enumeration of services. It is intended as a
time-saving tool for use in CTFs and other penetration testing
environments (e.g. OSCP).
https://github.com/T… Continue reading AutoRecon is taking too long to complete
How can I enumerate a list of ip addresses in a text file using enum4linux?
I am trying to enumerate using enum4linux -a for every ip in the list