This room from TryHackMe cover attacks against a basic misconfigured Domain Controller via Kerberos enumeration, AS-REP Roasting, Impacket and Evil-WinRM. Setup # Impacket git clone https://githu...

I wrote this article in 2018 as part of an assignment in English for my studies. Please forgive my mistakes (if there is any). Introduction For many years, computers have been an integral par...

Reconnaissance Let's start off with a NMAP scan Browsing to http://10.10.10.206 we get a page wth a bunch of posts, users and email addresses. I did a bunch of XSS and LFI but none wor...

Foothold nmap scan $ nmap -min-rate 5000 --max-retries 1 -sV -sC -p- -oN Tabby-full-port-scan.txt 10.10.10.194 PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 8.2p1 Ubuntu 4...

Foothold Nmap Scan (open Ports) $ nmap -min-rate 5000 --max-retries 1 -sV -oA Academy 10.10.10.215 Nmap scan report for 10.10.10.215 Host is up (0.027s latency). Not shown: 998 closed ports PORT ...

Reconnaissance Let's start off with a NMAP scan -sV: Probe open ports to determine service/version info -sC: equivalent to --script=default We see this machine does not have any webserve...

Enumeration nmap scan $ nmap -min-rate 5000 --max-retries 1 -sV -sC -p- -oN Blunder-full-port-scan.txt 10.10.10.191 PORT STATE SERVICE VERSION 21/tcp closed ftp 80/tcp open http Apache ht...