gmassawe

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

gmassawe

sudo apt-get install virtualenv
git clone https://github.com/BastilleResearch/mousejack.git
cd mousejack
virtualenv -p /usr/bin/python2 venv
source venv/bin/activate
pip install pyusb
cp -r ~/Downloads/mousejack/venv/lib/python2.7/site-packages/usb ./prog/usb-flasher/
sudo make install

gmassawe

OpenSSL List Ciphers

  openssl ciphers -v | awk '{print $2}' | sort | uniq

Convert DER Format To PEM For RSA Key

  openssl rsa -inform DER -outform PEM -in certificate.der -out certificate.pem

gmassawe

deb http://http.kali.org/kali kali-rolling main non-free contrib
deb-src http://http.kali.org/kali kali-rolling main non-free contrib
deb http://http.kali.org/kali kali-rolling main non-free contrib

gmassawe

#deb cdrom:[Ubuntu 14.04.3 LTS _Trusty Tahr_ - Beta amd64 (20150805)]/ trusty main restricted

# See http://help.ubuntu.com/community/UpgradeNotes for how to upgrade to
# newer versions of the distribution.
deb http://us.archive.ubuntu.com/ubuntu/ trusty main restricted
deb-src http://us.archive.ubuntu.com/ubuntu/ trusty main restricted

## Major bug fix updates produced after the final release of the
## distribution.
deb http://us.archive.ubuntu.com/ubuntu/ trusty-updates main restricted

gmassawe

#deb cdrom:[Ubuntu 16.04.2 LTS _Xenial Xerus_ - Release amd64 (20170215.2)]/ xenial main restricted

# See http://help.ubuntu.com/community/UpgradeNotes for how to upgrade to
# newer versions of the distribution.
deb http://us.archive.ubuntu.com/ubuntu/ xenial main restricted
# deb-src http://us.archive.ubuntu.com/ubuntu/ xenial main restricted

## Major bug fix updates produced after the final release of the
## distribution.
deb http://us.archive.ubuntu.com/ubuntu/ xenial-updates main restricted

gmassawe

Create self-signed certificates with OpenSSL

Root CA

Create Root CA key (enable password with '-des3' or '-aes' option)

$ openssl genrsa -des3 -out root.key 4096
$ openssl genrsa -aes256 -out root.key 4096

gmassawe

# Netplan static IP config Ubuntu Server 18.04
network:
  version: 2
  renderer: networkd
  ethernets:
    enp6s7:
      dhcp4: no
      dhcp6: no
      addresses: [xxx.xxx.xxx.xxx/xx]
      gateway4: xxx.xxx.xxx.xxx

gmassawe

@echo off
::
:: This script clears cached GPOs
:: George Massawe 03/14/2019
::
DEL /S /F /Q “%ALLUSERSPROFILE%\Microsoft\Group Policy\History\*.*”
REG DELETE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy /f
REG DELETE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies /f
REG DELETE HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies /f
DEL /F /Q C:\WINDOWS\security\Database\secedit.sdb

gmassawe

DESKTOPS

Version 1
select * from Win32_OperatingSystem WHERE ProductType = "1"

Version 2 (better for Win7 sometimes)
select * from Win32_OperatingSystem WHERE (ProductType <> "2") AND (ProductType <> "3")

32-bit
select * from Win32_OperatingSystem WHERE ProductType = "1" AND NOT OSArchitecture = "64-bit"