Domain Privilege Escalation – CVE-2022-26923: CertiFried
In this post we will be deep-diving into a devastating CVE that was just was announced and patched on Tuesday, May 10th 2022: CVE-2022-26923 – CertiFried. To do this, we will be…
Read MoreDomain Privilege Escalation – CVE-2022-26923: CertiFried
Proving Grounds – Heist
In this Walkthrough, we will be hacking the machine Heist from Proving Grounds Practice. We will begin by finding an SSRF vulnerability on a web server that the target is hosting on…
Window’s Persistence – Manual Techniques
For this post we will be exploring various techniques that can be used to establish persistence on a Windows victim. Since there are so many tools and techniques when it comes to…
Proving Grounds – Hutch
In this Walkthrough, we will be hacking the machine Hutch from Proving Grounds Practice. To begin, we will utilize the ability to perform an anonymous LDAP search to dump account information where…
Lateral Movement – NTLM Relay Attacks
In this post we will explore different techniques that can be used to perform NTLM relay attacks to move laterally and access different machines and resources in the network. To start, we…
AD Recon – LLMNR Poisoning with Responder
In this post we will go over the concept of LLMNR poisoning. To perform LLMNR poisoning we will execute a MITM (man-in-the-middle) attack using a tool called Responder. Using this tool we…
Windows File Transfers For Hackers
For this post, we will be deep-diving into the art of Windows file transfers. We will go over various techniques on how to transfer files from our attacker machine onto a victim…
UAC-Bypass – Windows Privilege Escalation
In this post we will go over three different methods that can be used to perform UAC-bypass in order to elevate from a medium-integrity shell to a high-integrity shell. We will run…
Lateral Movement – Over-Pass-the-Hash Attacks
In this post we will be demonstrating how to perform an over-pass-the-hash attack using rubeus.exe and getTGT.py. We will run through a quick example scenario where we have gotten a foothold on…