cyberheartmi9 / Red-Team-notes

Last active March 12, 2025 23:43

	# Enumeration

	# Credential Injection

	runas.exe /netonly /user:<domain>\<username> cmd.exe


	# enumeration users
	users
	net user /domain

cyberheartmi9 / kerberos attacks

Last active November 20, 2022 10:41

	========================================================================================================================
	Kerberos Attacks
	========================================================================================================================



	[+] Kerbose attack

	./GetUserSPNs.py -dc-ip 192.168.168.10 sittingduck.info/notanadmin

todmephis / Automating scanning with fish shell

Last active August 12, 2020 07:46

Automating scanning with fish shell

	=======================HOST DISCOVERY===========================================
	Host discovery con PING:
	$ for octect in (seq 0 254)
	echo "Pinging [X.X.X.$octect]"
	ping -c 2 10.150.150.$octect \| grep "bytes from" \| awk '{print $4}' \| uniq -d \| cut -d ":" -f 1 \| tee -a targets.list
	end

	Host discovery con NMAP IMCP o ARP

	$sudo nmap -vv -sn -PE 10.150.150.0/24 -oG HOSTDISCOVERY_ICMP.gnmap

AvasDream / oscp_prep.md

Last active February 5, 2025 04:40

Resource for OSCP like HTB Boxes with Ippsec Videos and Writeups.

Sources

Google spreadsheet

Linux Boxes

Lame

Writeup 0xdf

5bhuv4n35h / buffers.sh

Created May 12, 2020 11:06

gerate unique string and eip in one place .run buffer overflow e

	#!/bin/bash
	##### (Cosmetic) Colour output
	RED="\033[01;31m" # Issues/Errors
	GREEN="\033[01;32m" # Success
	YELLOW="\033[01;33m" # Warnings/Information
	BLUE="\033[01;34m" # Heading
	BOLD="\033[01;01m" # Highlight
	RESET="\033[00m" # Normal
	echo -e "${GREEN}"
	##################################installation starts ######################################

5bhuv4n35h / install.sh

Last active July 27, 2020 12:17

pentest setup backup shell script to install sublime,typora,shellter,wine,figlet,lolcat,gobuster automatically using linux commands #oscp #pentest #documentation #tools

	#!/bin/bash

	##### (Cosmetic) Colour output
	RED="\033[01;31m" # Issues/Errors
	GREEN="\033[01;32m" # Success
	YELLOW="\033[01;33m" # Warnings/Information
	BLUE="\033[01;34m" # Heading
	BOLD="\033[01;01m" # Highlight
	RESET="\033[00m" # Normal

w00tc / 1) Active Directory One Liners

Last active August 19, 2024 22:56

Some Pentesting Notes

	Retrieves all of the trust relationships for this domain - Does not Grab Forest Trusts

	([System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain()).GetAllTrustRelationships()


	Grab Forest Trusts.

	([System.DirectoryServices.ActiveDirectory.Forest]::GetCurrentForest()).GetAllTrustRelationships()

ssstonebraker / Active Directory Attacks.md

Last active January 15, 2025 00:06

Active Directory Attacks #oscp

Note: I did not author this, i found it somehwere.

Active Directory Attacks

Summary

Tools
Most common paths to AD compromise
- MS14-068 (Microsoft Kerberos Checksum Validation Vulnerability)
- Open Shares
[GPO - Pivoting with Local Admin

todmephis / setupmykl.sh

Last active January 20, 2021 21:14

Script to setup my kl installation. (deprecated)

	#!/bin/bash
	#LAST UPDATE: 30/03/2020
	#LAS CHANGE: added pkg-config.
	RED='\033[0;31m'
	GRN='\033[0;32m'
	YLL='\033[1;33m'
	NC='\033[0m' # No Color
	#FILE NAMES
	PTROOTDIR="pentestTools"
	PTDIRS="{lists,tools,shells/{klbuiltin,}}"

TarlogicSecurity / kerberos_attacks_cheatsheet.md

Created May 14, 2019 13:33

A cheatsheet with commands that can be used to perform kerberos attacks

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module: