Atumcell

Note: I did not author this, i found it somehwere.

Active Directory Attacks

Summary

• Tools
• Most common paths to AD compromise
  • MS14-068 (Microsoft Kerberos Checksum Validation Vulnerability)
  • Open Shares
• [GPO - Pivoting with Local Admin

Atumcell

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

Atumcell

// Function to click all elements matching the specified XPath
function clickElementsWithXPath(xpath) {
    const matchingElements = document.evaluate(xpath, document, null, XPathResult.ORDERED_NODE_SNAPSHOT_TYPE, null);

    for (let i = 0; i < matchingElements.snapshotLength; i++) {
        const element = matchingElements.snapshotItem(i);
        element.click();
        console.log('Clicked Element', i + 1);
    }
}