Collaborate Disseminate
I am testing the security of a Windows Server 2019 machine and have a question about remote access to the machine.
The user on the machine has the permission "SeBackupPrivilege". I can therefore dump the "Administrator"… Continue reading Pass-the-hash, why do I get a shell with high integrity?
I’m studying how to attack AD, but so far I have seen how to use pass the hash and pass the ticket to get access to Windows machines. How does one attack Linux machines joined to the domain using the same technique? I could not find anythi… Continue reading Pass the hash/ pass the ticket TO a linux machine
Can you help me get 10 Character String?
In order to get the String how it was before the Hashing Process,
you’ll need to brute force it. Now, to make this easier for you all,
I’ll reveal the format, however, we’ve have made it harder for… Continue reading Can you help me get 10 Character String? [closed]
Here is setup
Machine 2
logged in as user2
share folder access granted to user3
Machine 3
logged in as user3
Machine 1 (server1.hacklab.local)
domain administrator
Here are the commands I used
use exploit/windows/smb/psexec
set rhos… Continue reading Unable to access psexec resource using pass the hash (mimikatz+meterpreter)
We are using a Samba configuration on our RedHat (RHEL7.9) systems, where SMB authentication is based on an NTLM password hash, which is basically a clear-text credential for a challenge-response authentication that is stored in a separate… Continue reading How to overcome MD4 hashing in SAMBA
Mimikatz’s sekurlsa::pth documentation states:
mimikatz can perform the well-known operation ‘Pass-The-Hash’ to run a
process under another credentials with NTLM hash of the user’s
password, instead of its real password.
For this, it star… Continue reading How does local pass-the-hash (mimikatz’s sekurlsa::pth) work?
The tool Responder written in Python permits to listen on a specific network card requests and automatically poisoning victims the steal hash NTLMv1 and hash NTLMv2.
The attack Pass-The-Hash permits to connect to a service like SMB.
I am a… Continue reading Is it possible make a Pass-The-Hash attack with Responder?
At my Company, we put a honeypot in our network and it raised us the Lansweeper SSH password used to connect to the scanned assets (and it is reusable over many boxes…).
So it is a way for an attacker to get sensitive passwords in a corp… Continue reading Is this Wikipedia article about SCRAM wrong?
If a user scan his fingerprint, and this fingerprint (let’s say a [x,y] image) is hashed and then sent to a server that stores this hash, is the fingerprint scan susceptible to either dictionary attack or pass-the-hash attack?
Many businesses rely on corporate-owned Windows 10 devices for securing corporate endpoints. In an attempt to keep cyberattackers at bay, they may try to lock down Windows 10 with a variety of security features, such as Windows Defender (or a third-par… Continue reading Win10: 3 Perspectives on Endpoint Security Strategies