pr0b3r7

Corporate Backup — Filtered Unique File Manifest

Excludes: .burp, .burp.backup, video (.mp4/.m4a/.mkv/.avi/.mov/.wmv/.webm), .iso

Total: 8,155 files, 28.5 GB

Excluded: 73 files, 38.3 GB

External Share/ (7 files, 15.8 GB)

#	Size	Filename	Full Path
1	15.8 GB	synthetic_data_55GB.txt.zip	External Share/2 - Exercises/2025/2025-MAR-HUM-PTE/synthetic_data_55GB.txt.zip

pr0b3r7

Corporate Backup — Unique File Manifest

Generated: 2026-05-23

Strategy: Option A (Unique-Only, Zero Triplication)

Total: 8,228 files, 66.8 GB

Method: Name+size fuzzy match across 3 locations:

• OneDrive - Humana (66,003 files via hgfs)
• GDrive EIP (647,317 files, local FUSE)
• Local backup (22,519 files)

pr0b3r7

#!/usr/bin/env python3

'''
NameMash by superkojiman

Generate a list of possible usernames from a person's first and last name. 

https://blog.techorganic.com/2011/07/17/creating-a-user-name-list-for-brute-force-attacks/
'''

pr0b3r7

Keybase proof

I hereby claim:

• I am pr0b3r7 on github.
• I am pr0b3r7 (https://keybase.io/pr0b3r7) on keybase.
• I have a public key ASCL5zda5cB55fG1VrCssb9nexOtge96l4gOr4-4Z5GqEAo

To claim this, I am signing this object:

pr0b3r7

Reverse Shell Cheat Sheet

Summary

• Reverse Shell
  • Bash TCP
  • Bash UDP
  • Socat
  • Perl
  • Python

pr0b3r7

FCKGW-RHQQ2-YXRKT-8TG6W-2B7Q8

Windows XP PRO Corporate serial number S/N: Key: MQPWW-PGVKX-YPMKG-8DH3G-KC8PW
windows xp home edition serial number S/N: 034634-262024-171505-828316-729010-413531-800424-400442
Windows XP 64 serial number S/N: B2RBK-7KPT9-4JP6X-QQFWM-PJD6G
Windows XP serial number S/N: K6C2K-KY62K-DQR84-RD4QV-QB74Q
Windows XP Professional 64-bit Corporate Edition 5.2.3790.1830 serial number S/N: VCFQD-V9FX9-46WVH-K3CD4-4J3JM
Microsoft Windows XP Professional SP2 serial number S/N: YY8F2-3CKVQ-RKTRG-6JMDR-9DTG6
Windows XP Professional Service Pack 1 sp1 serial number S/N: F46YY - 2R8VQ - R8GMY - 926VK - 6BQ73
Windows XP Pro serial number S/N: KBWR7-76BD8-J7MDQ-KKG&C-V9Q2J

pr0b3r7

# high sierra
sudo launchctl stop com.openssh.sshd
sudo launchctl start com.openssh.sshd


# latest
sudo vim /etc/services # (update the port config for ssh and save)
sudo launchctl unload /System/Library/LaunchDaemons/ssh.plist
sudo launchctl load -w /System/Library/LaunchDaemons/ssh.plist

pr0b3r7

using System;
using System.EnterpriseServices;
using System.Runtime.InteropServices;

/*

Author: Casey Smith, Twitter: @subTee
License: BSD 3-Clause

Create Your Strong Name Key -> key.snk

pr0b3r7

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

pr0b3r7

Retrieves all of the trust relationships for this domain - Does not Grab Forest Trusts 

([System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain()).GetAllTrustRelationships()


Grab Forest Trusts.

([System.DirectoryServices.ActiveDirectory.Forest]::GetCurrentForest()).GetAllTrustRelationships()