Proelians

Proactive Cyber Security

[Proelians @proelians]

We are excited to introduce T.E.R.R.A

T.E.R.R.A = Test, Educate, Review, Response, Adversary, represents our dedication to securing your data and systems.

Upgrade your security today with T.E.R.R.A.

More info 👉 https://t.co/WgC6NHRxvz

#cybersecurity #testing #ethicalhacking

[Proelians @proelians]

Think members of the "Protected Users" group in Active Directory are safe? Not really!

Although classic NTLM pass-the-hash attacks will not work, an attacker could still use Kerberos to authenticate as members of this group.

#redteamtips #cybersecuritytips #redteam #pentest

[Proelians @proelians]

Did you know that when you create a web application in Azure, Microsoft provides you with a *.azurewebsites.net domain out-of-the-box? Sounds like a great domain to host your phishing scenarios!

#cybersecurity #cybersecuritytips #infosec #redteam #redteamtips #pentest #phishing

[Proelians @proelians]

When sending phishing emails, assume the worst and be ready to bypass 2FA with evilnginx2 or Modlishka

https://t.co/6itxJfjXyd
https://t.co/awPgjnRVp2

#cybersecurity #cybersecuritytips #infosec #redteam #redteamtips #pentest #phishing

[Proelians @proelians]

Want to identify issues in 2FA environments? If you have a valid account on your target domain, you can use MFASweep to look for vulnerabilities against different services.

https://t.co/XGQ4es2hWz

#cybersecurity #cybersecuritytips #infosec #redteam #redteamtips #pentest

[Proelians @proelians]

On a domain-joined machine and you want to escalate your privileges to SYSTEM?

Check out KrbRelayUp 👇by @dec0ne You get local admin when LDAP signing is disabled.

https://t.co/qNsJ5weOZ6

#cybersecurity #cybersecuritytips #infosec #redteam #redteamtips #pentest

[Proelians @proelians]

Looking for secrets in Android applications? Decompile the app with apktool and use gf by @TomNomNom against the output.

https://t.co/VZa2dpv3Yn

#cybersecurity #cybersecuritytips #infosec #redteam #redteamtips #pentest #bugbountytips #BugBounty

[Proelians @proelians]

Using GoPhish for your campaigns? Remember to remove all the indicators! 👇

#cybersecurity #cybersecuritytips #infosec #redteam #redteamtips #phishing

[Proelians @proelians]

🚨 New Tool 🚨

Sample Payload Generator creates a number of HTTP/DNS/ICMP payloads which helps an attacker to find a possible channel to establish C2 traffic or exfiltrate data.

👉 https://t.co/uHSiGEsE0u

#redteamtips #redteam #ctf #bugbountytips #BugBounty

[Proelians @proelians]

Your security team needs help navigating BloodHound? Try PlumHound, a tool specifically designed for Blue and Purple Teams https://t.co/AqsTAJPMKF

#cybersecurity #cybersecuritytips #infosec #purpleteam

[Proelians @proelians]

Want to find vulnerabilities in group policy? Make sure to run Group3r on your target https://t.co/AvrQiTSZtY

#cybersecurity #cybersecuritytips #infosec #redteam #redteamtips

[Proelians @proelians]

Did you know you can get Administrator access to any system running WebDav in a Windows Domain by abusing Kerberos delegation? Disable this service if not needed!

#cybersecurity #cybersecuritytips #infosec #redteam #redteamtips

[Proelians @proelians]

Want to find out what services is your target using, and they have ADFS exposed? Browse to https://t.co/GgEgIy7kfE and get the list from the drop-down menu!

#cybersecurity #cybersecuritytips #infosec #redteam #redteamtips

[Proelians @proelians]

Worried if a data breach has affected users in your organization? Use the domain search of @haveibeenpwned to find out! https://t.co/LGSRyb4VfC

#cybersecurity #cybersecuritytips #infosec

[Proelians @proelians]

Need a good domain name to use for your engagement? Have a look at https://t.co/8fvcWA0g0t and find a domain with a good reputation!

#cybersecurity #cybersecuritytips #infosec #redteam #redteamtips

[Proelians @proelians]

Want to get rid of external email warnings when sending a phishing campaign? Remove everything from the body using CSS apart from your elements!

#cybersecurity #cybersecuritytips #infosec #redteam #redteamtips

[Proelians @proelians]

[2/2] From domain user to domain admin:

- NTLM Relay + RBCD
- NTLM Relay + Local Admin + LSA Secrets
- Kerberosting
- Active Directory Certificate Service Exploitation

More info: https://t.co/U4usIENE5B

[Proelians @proelians]

[1/2] 🔥2022 Common Active Directory Exploitation Paths 🔥

From unauthenticated to domain user:

- SMB Null + Password Spray
- LLMNR / NBT-NS / mDNS protocols
- AS-REP Roast
- PetiPotam + NTLMv1 Downgrade + DCSync

[Proelians @proelians]

🚨New blog post! 🚨

Check out our guidelines, tips and suggestions on how to secure Microsoft Active Directory!

➡️https://t.co/s0RPvN3m0n

#redteamtips #redteam #activedirectory #cybersecurity #blueteam

[Proelians @proelians]

We want the cyber security industry to grow and share knowledge among their members.

That's reason why we are attending this amazing cyber security conference today. Thanks @HackInBo

Check this out 👉 https://t.co/Wj1s5RSJFu

#hackingbo #redteam #cybersecurity #cyberitaly