Cybground

Welcome to my world of ethical hacking! 👨‍💻 Sharing live updates on my penetration testing adventures, methodologies, and hacks.

[Cybground @cybground]

Unveiling the Shadows: Becoming a Domain Admin through Coercing NTLMv1 Hashes from the Domain Controller. A thread 🧵. #cybersecurity #ethicalhacking #pentesting #ntlmv1 (1/10)

[Cybground @cybground]

🚨 Just became a domain administrator because Kyocera printer (CVE-2022-1026) stored domain admin credentials for scanning to Synology. Stay tuned for a detailed post soon! #CyberSecurity #ethicalhacking

[Cybground @cybground]

Trying out Crackmapexec v6.0. It's a huge improvement with a lot of useful new modules!

[Cybground @cybground]

@mpgn_x64 @mpgn_x64 does the subscription provides anything else besides early updates? I'm really considering to support this tool. I see 'contents and perks' on the website, but what does this mean?

[Cybground @cybground]

@mpgn_x64 Crackmapexec v6.0 (Bane) looks great! Nice job. I'm going to try it out tomorrow during a new penetration test ;)

[Cybground @cybground]

Read more at our blog https://t.co/2s4ZzSe5Hz (10/10).
#cybersecurity #blog #ethicalhacking #pentesting #cybground

[Cybground @cybground]

Unveiling the Shadows: Becoming a Domain Admin through Coercing NTLMv1 Hashes from the Domain Controller. A thread 🧵. #cybersecurity #ethicalhacking #pentesting #ntlmv1 (1/10)

[Cybground @cybground]

Once cracked (took us 10 days), you will recover the NT hash for the computer account that was coerced. Because in our case the host is a domain controller, it can then be used to DCSync directly via PtH without needing to impersonate any other account. (9/10)

[Cybground @cybground]

Hello world.