rahmiy / 1) Active Directory One Liners

Created July 27, 2020 12:24 — forked from w00tc/1) Active Directory One Liners

Some Pentesting Notes

	Retrieves all of the trust relationships for this domain - Does not Grab Forest Trusts

	([System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain()).GetAllTrustRelationships()


	Grab Forest Trusts.

	([System.DirectoryServices.ActiveDirectory.Forest]::GetCurrentForest()).GetAllTrustRelationships()

rahmiy / install.sh

Created July 27, 2020 12:17 — forked from 5bhuv4n35h/install.sh

pentest setup backup shell script to install sublime,typora,shellter,wine,figlet,lolcat,gobuster automatically using linux commands #oscp #pentest #documentation #tools

	#!/bin/bash

	##### (Cosmetic) Colour output
	RED="\033[01;31m" # Issues/Errors
	GREEN="\033[01;32m" # Success
	YELLOW="\033[01;33m" # Warnings/Information
	BLUE="\033[01;34m" # Heading
	BOLD="\033[01;01m" # Highlight
	RESET="\033[00m" # Normal

rahmiy / kerberos_attacks_cheatsheet.md

Created July 24, 2020 12:42 — forked from TarlogicSecurity/kerberos_attacks_cheatsheet.md

A cheatsheet with commands that can be used to perform kerberos attacks

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

rahmiy / 7d82ef55ea5f59a09c42d4c423a6e0ea33731c7e0d1f59509df390656377fea2

Created May 21, 2019 14:03 — forked from JohnLaTwC/7d82ef55ea5f59a09c42d4c423a6e0ea33731c7e0d1f59509df390656377fea2

https://www.virustotal.com/#/file/7d82ef55ea5f59a09c42d4c423a6e0ea33731c7e0d1f59509df390656377fea2/detection

	# SECUREAUTH LABS. Copyright 2018 SecureAuth Corporation. All rights reserved.
	#
	# This software is provided under a slightly modified version
	# of the Apache Software License. See the accompanying LICENSE file
	# for more information.
	#
	# Description: Performs various techniques to dump hashes from the
	# remote machine without executing any agent there.
	# For SAM and LSA Secrets (including cached creds)
	# we try to read as much as we can from the registry

rahmiy / asn

Created April 26, 2019 07:27 — forked from nitefood/README.md

ASN/IP/Route/hostname command line lookup tool to map any network to the corresponding ASN and prefix

	#!/bin/bash

	############################################################################################################
	# ----------------------------------------------------------------------
	# ASN/IPv4/Prefix lookup tool. Uses Team Cymru's whois service for data.
	# ----------------------------------------------------------------------
	# example usage:
	# asn <ASnumber> -- to lookup matching ASN data. Supports "as123" and "123" formats (case insensitive)
	# asn <IP.AD.DR.ESS> -- to lookup matching route and ASN data
	# asn <ROUTE> -- to lookup matching ASN data

rahmiy / Hacking OSCP

Created April 18, 2019 12:30

	OSCP Prep class


	Day 1: Exploit Research
	http://www.securitytube.net/groups?operation=view&groupId=7

	Day 2: Python Hacking
	https://www.youtube.com/playlist?list=PLEA1FEF17E1E5C0DA (videos 1-10 if you are a complete beginner)
	https://www.youtube.com/playlist?list=PL1A2CSdiySGLtKwqBnqj9BON6QQjWkP4n (entire playlist)

Rahmi YILDIZ rahmiy

Kerberos cheatsheet

Bruteforcing