glides

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

erikig

acerzhou

$myResourceGroup = Read-Host -prompt "Enter a resource group name: "
$myLocation = Read-Host -prompt "Enter a location (ie. WestUS): "
$myVM = Read-Host -prompt "Enter a VM name: "
$vmAdmin = Read-Host -prompt "Enter a VM admin user name: "

# The password must meet the length and complexity requirements.
$vmPassword = Read-Host -prompt "Enter the admin password: "

# create a resource group
New-AzResourceGroup -Name $myResourceGroup -Location $myLocation

aerobounce

macOS System Preference Pane Links

Some might be outdated.
Taken from (404 as of today): https://macosxautomation.com/system-prefs-links.html

Example

$ open "x-apple.systempreferences:com.apple.preference.security?General"

angelobelchior

#Passo-a-passo para a instalação do Elastic Stack seguindo as aulas do Eduardo Neves (https://www.youtube.com/watch?v=B3Vl0nQyK-U)
#Esse passo-a-passo foi testado no Ubuntu 20.04

#Java
sudo apt update
sudo apt install default-jre
sudo apt install default-jdk
export JAVA_HOME=/usr/lib/jvm/default-java-
export PATH=${PATH}:${JAVA_HOME}/bin

kbhunut

#Requires -Version 7.0
# If you powershell version is lower than 7. Must update to the latest version.
# Install Azure Graph Powershell Module
# Run this Command: Install-Module -Name AzureAD
# https://docs.microsoft.com/en-us/office365/enterprise/powershell/connect-to-office-365-powershell#connect-with-the-azure-active-directory-powershell-for-graph-module
# https://docs.microsoft.com/en-us/office365/enterprise/powershell/manage-user-accounts-and-licenses-with-office-365-powershell
$Credential = Get-Credential
Connect-AzureAD -Credential $Credential

# Tried of input credential every time? You can export credential and import it.

machv

How to run Azure AD Connect behind proxy server

In this scenario I am using two proxy servers:

• User proxy - with authentication required for users
• System proxy - for machine context without any authentication

Sample squid configuration is below together with PowerShell script to configure prerequisities (https://docs.microsoft.com/cs-cz/azure/active-directory/hybrid/how-to-connect-install-prerequisites#connectivity).

Do not make any changes to miiserver.exe.config. This file is overwritten on every upgrade so even if it works during initial install, the system stops working on first upgrade. For that reason, the recommendation is to update machine.config instead.

OleksandrKucherenko

#!/usr/bin/env bash

set -x # uncomment to debug

# required for Homebrew
xcode-select —-install
sudo xcodebuild -license accept

# install https://brew.sh/
which brew || (/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install.sh)" )

JacobErnst98

Connect-MsolService
$people = "<sam1>,<sam2>"
$domain = "<@website.com>"
foreach($person in $people){
$tmpPass = Set-MsolUserPassword -UserPrincipalName $($person + $domain)
Set-ADAccountPassword -Identity $person -Reset -NewPassword (ConvertTo-SecureString -AsPlainText $tmpPass -Force)
Add-ADGroupMember -Identity "E2" -Members $person
Write-Host $person "---Password---" $tmpPass
}

RickVanRousselt

#Depending if you are already connected execute this first part
Connect-AzureAD

#Get the Service Principal that was created when you created a Managed Identity from your Web App
$MyMI = Get-AzureADServicePrincipal -ObjectId <ID(GUID) of your managed identity shown in the Azure portal>

#Get the Office 365 SharePoint Online API
$SharePointAPI = Get-AzureADServicePrincipal -SearchString “Office 365 SharePoint”

#Select the User.ReadWrite.All App-Only Permissions. If you want another App-Only permission then search for another value