In this post, we are going to explore various tools and techniques that we can use to dump the LSASS process and extract the hashes within. To begin, we will see two different scenarios that allow us to dump the…
In this blog post we will be exploring how to dump all of the hashes in a domain using an LSA dump. To do this, we will be using three different versions of Mimikatz: mimikatz.exe, Invoke-Mimikatz.ps1, and Meterpreter Kiwi. For…
In this blog post we are going to explore both golden ticket and silver ticket attacks. We will use Mimikatz to forge both a golden and silver ticket and see how we can use these tickets in a pass-the-ticket attack…
In this blog post, we will learn about AS-REP Roasting attacks and how they can be performed both remotely as well as from a foothold on a target host in the domain. To begin, we will briefly learn about Kerberos…
In this blog post, we will explore multiple ways to perform a kerberoasting attack in an Active Directory environment. To begin, we will briefly learn about Kerberos and how a kerberoasting attack works. From there, our first example begins from…
