Not a lot of people may know this, but even someone with only “Domain User” credentials can read a whole lot of information about Microsoft Active Directory from their personal machine without any sort...
Showing Only IPs of Active Hosts / Output to File There may be a need to output only the IP addresses of the active hosts on a subnet. We can strip out all of...
After having using Tenable Nessus years ago, I decided to give OpenVAS a spin. Open VAS, like Nessus, is a vulnerability scanner. Unlike Nessus, OpenVAS is open source and free to download and use....
nmap is a free, open source, and very powerful security scanner. It’s used to discover hosts on a network, provide information about what types of services might be running on those hosts and even...
Thumbnail image on this article thanks to u/hkntshr on Reddit, since his looks pretty and mine’s a mess. So for a couple months I’ve been running Linux as my primary OS on both my...
A couple weeks ago I bought a Sony VAIO UX from someone on eBay. The unit had been updated to Windows 7 from Windows Vista Business. Vista Business was the OS installed on the...
Flash back to 2006. This is long before everyone had an iPhone or Android device in their pocket. We were lucky to have a color LCD on our phones, let alone a nice capacitive...
After recently seeing a couple of YouTube reviews for DOS games that looked really fun, and that I’ve never played, I decided to look for the best way to play them on modern hardware....
3D printing is something that I didn’t think I’d ever get in to. To be honest, I’m still not really “in to it,” but I do find it frustratingly enjoyable for reasons I can’t...
I should specify at the outset that this tutorial is designed for the “Meraki Cloud” authentication type with Client VPN configuration from Meraki Dashboard. This article assumes that you already have Client VPN configured...
Jason 💻Follow
Pentester, 20 year technology professional, lifelong geek and lover of all things tech.
Something fun that worked for me today:
1. Get low priv creds (various methods)
2. Find Exchange servers: https://github.com/aslarchergore/exchange_hunter2
3. Run https://github.com/Ridter/Exchange2domain, an all-in-one tool for privexchange
4. Collect NTDS
5. Remove Replication-Get-Changes-All privileges for owned user
