id3s3c

### Keybase proof

I hereby claim:

  * I am id3s3c on github.
  * I am id3s3c (https://keybase.io/id3s3c) on keybase.
  * I have a public key ASCFSGG1ZSs7rzJXsD7ICviqimeQaS9BqVPqragVDEdySQo

To claim this, I am signing this object:

id3s3c

/usr/lib/ruby/2.7.0/fiddle.rb:47:in `initialize': /System/Library/Frameworks/Carbon.framework/Carbon: cannot open shared object file: No such file or directory (Fiddle::DLError)
        from /usr/lib/ruby/2.7.0/fiddle.rb:47:in `new'
        from /usr/lib/ruby/2.7.0/fiddle.rb:47:in `dlopen'
        from /usr/lib/ruby/2.7.0/fiddle/import.rb:87:in `block in dlload'
        from /usr/lib/ruby/2.7.0/fiddle/import.rb:77:in `collect'
        from /usr/lib/ruby/2.7.0/fiddle/import.rb:77:in `dlload'
        from (eval):46:in `<module:Carbon>'
        from (eval):40:in `<main>'
        from -:1:in `eval'
        from -:1:in `<main>'

id3s3c

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

id3s3c

TLDR

Cisco Security Manager is an enterprise-class security management application that provides insight into and control of Cisco security and network devices. Cisco Security Manager offers comprehensive security management (configuration and event management) across a wide range of Cisco security appliances, including Cisco ASA Adaptive Security Appliances, Cisco IPS Series Sensor Appliances, Cisco Integrated Services Routers (ISRs), Cisco Firewall Services Modules (FWSMs), Cisco Catalyst, Cisco Switches and many more. Cisco Security Manager allows you to manage networks of all sizes efficiently-from small networks to large networks consisting of hundreds of devices.

Several pre-auth vulnerabilities were submitted to Cisco on 2020-07-13 and (according to Cisco) patched in version 4.22 on 2020-11-10. Release notes didn't state anything about the vulnerabilities, security advisories were not published. All payload are processed in the context of NT AUTHORITY\SYSTEM.

id3s3c

nucleir() {
	local TPL="$HOME/Documents/nuclei-templates"

	[[ -z "${1}" ]] && { echo "-target/-l ?"; return; }
	[[ -z "${2}" ]] && { echo "Input target?"; return; }

	local T=""

	for i in `ls -1d ${TPL}/*/`; do
		if [[ ! "${i}" =~ (brute-force|examples|payloads) ]]; then

id3s3c

test123

id3s3c

Maurindo da Silva - 52741513104
Marcelo da Silva - 45847767250
Marcos da Silva - 24724978490
Mauricio da Silva - 45942742693