#HackTip - Twitter Hashtag

¡Lorénzo @yohanamx

about 1 year ago

You want to learn programming?? This is a #HackTip Programming is not about how computer work. But how your brain work.

1

0

79

sn🥶vvcr💥sh @snovvcrash

over 1 year ago

[#HackTip ⚒️] Something fun I’ve had to do on an engagement today: swapping SYSTEM ↔️ user contexts to decrypt the local state key. The result can be passed to GhostPack’s #SharpChrome as /statekey to get target user’s plaintext cookies 🍪

snovvcrash's tweet photo. [#HackTip ⚒️] Something fun I’ve had to do on an engagement today: swapping SYSTEM ↔️ user contexts to decrypt the local state key. The result can be passed to GhostPack’s #SharpChrome as /statekey to get target user’s plaintext cookies 🍪 https://t.co/xHWsTwmahN

5

157

36

85

11K

Cheeky M @CheekyMark1917

about 3 years ago

@xeno_swift @BonnieGlaser Get ahead of the propaganda game, Bonnie. Write something staggeringly foul about Saudi-Arabia BEFORE your bosses tell you to. #hacktip

1

0

59

sn🥶vvcr💥sh @snovvcrash

about 3 years ago

[#HackTip ⚒️] Who even cares about MS17-010 in 2k23?! Well I did at the recent pentest engagement 🤦🏻‍♂️ (1/) I’ve not practiced #EternalBlue exploitation already for a while, so I decided to deploy a vulnerable VM first in order not to screw up the production server ⤵️

5

86

17

28

19K

sn🥶vvcr💥sh @snovvcrash

over 3 years ago

[#HackTip ⚒️] One idea for NTDS on-site dumping without VSS: NTFSCopy (thx @RedCursorSec) + #impacket’s RemoteOperations.getBootKey() + secretsdump[.]py (e.g., via a pre-compiled binary or @naksyn’s awesome Pyramid) 🤪 https://t.co/0UATJuJ1ob

snovvcrash's tweet photo. [#HackTip ⚒️] One idea for NTDS on-site dumping without VSS: NTFSCopy (thx @RedCursorSec) + #impacket’s RemoteOperations.getBootKey() + secretsdump[.]py (e.g., via a pre-compiled binary or @naksyn’s awesome Pyramid) 🤪

https://t.co/0UATJuJ1ob https://t.co/zKOwYVo0Fj

Tim McGuffin @NotMedic

over 3 years ago

That DIT is going to take forever to exfiltrate. Better to strip the hashes out and exfiltrate those instead. https://t.co/JpJlpiI2hA ntdsAudit.exe '.\Active Directory\ntds.dit' -s registry\SYSTEM -p pwddump.txt -u users.csv Its c#, so you can reflectively load it in PS, too.

3

97

22

35

42K

2

158

38

46

25K

sn🥶vvcr💥sh @snovvcrash

over 3 years ago

[#HackTip ⚒️] A simple post-exploitation tip when you’ve added a GitLab admin from a compomised gitlab-rails console: if there’s only LDAP auth available and you cannot sign in even when you possess valid creds, do this to enable password auth for web 🤓 https://t.co/uJCcbhQZNz

snovvcrash's tweet photo. [#HackTip ⚒️] A simple post-exploitation tip when you’ve added a GitLab admin from a compomised gitlab-rails console: if there’s only LDAP auth available and you cannot sign in even when you possess valid creds, do this to enable password auth for web 🤓

https://t.co/uJCcbhQZNz https://t.co/AIuP9gQHEm

0

53

10

6

0

sn🥶vvcr💥sh @snovvcrash

over 3 years ago

[#HackTip ⚒️] (1/3) There’re a couple of ways to become a local admin on a box when you possess only the corresponding machine account NT hash. The first one being the well known Silver ticket technique that can be performed via ticketer[.]py from #Impacket ⬇️

snovvcrash's tweet photo. [#HackTip ⚒️] (1/3) There’re a couple of ways to become a local admin on a box when you possess only the corresponding machine account NT hash. The first one being the well known Silver ticket technique that can be performed via ticketer[.]py from #Impacket ⬇️ https://t.co/QpS7UiULtj

7

409

103

156

0

sn🥶vvcr💥sh @snovvcrash

almost 4 years ago

[#HackTip ⚒] While guys @_EthicalChaos_ and @an0n_r0 are talking about a legitimate way of jumping into RDP via smart card auth having a certificate, I’ll give a more clumsy approach: UnPAC-the-Hash (PKINIT) ⏭ DisableRestrictedAdmin=0 ⏭ scforceoption=0 ⏭ xfreerdp /pth 🎉

snovvcrash's tweet photo. [#HackTip ⚒] While guys @_EthicalChaos_ and @an0n_r0 are talking about a legitimate way of jumping into RDP via smart card auth having a certificate, I’ll give a more clumsy approach: UnPAC-the-Hash (PKINIT) ⏭ DisableRestrictedAdmin=0 ⏭ scforceoption=0 ⏭ xfreerdp /pth 🎉 https://t.co/yJG3XOvJAR

4

152

36

38

0

Abel M. Gallego @AbelGallego

almost 4 years ago

@DanielCasasB_ @andrescamachom_ @IreneVelezT @MinEnergiaCo #HackTip pon la página en modo lectura, y listo 😉

0

1

0

sn🥶vvcr💥sh @snovvcrash

almost 4 years ago

[#HackTip ⚒] Looking for a legitimate way of achieving #persistence on Windows? How about #AnyDesk silent deployment? 😉

12

795

212

242

0

sn🥶vvcr💥sh @snovvcrash

almost 4 years ago

[#HackTip ⚒] A cool technique for initial AD access during a pentest. Got a Cisco IP Phone nearby? Congrats, you’re (almost) an domain user! #pentest #ad #cisco

snovvcrash's tweet photo. [#HackTip ⚒] A cool technique for initial AD access during a pentest. Got a Cisco IP Phone nearby? Congrats, you’re (almost) an domain user!

#pentest #ad #cisco https://t.co/847lCaPssv

6

941

276

288

0

sn🥶vvcr💥sh @snovvcrash

almost 4 years ago

[#HackTip ⚒] Such a tiny code snippet that can help you bypass some automatic sandbox detections ⏳ #maldev

2

115

28

30

0

sn🥶vvcr💥sh @snovvcrash

almost 4 years ago

[#HackTip ⚒] When there’s not much info revealed about AD sites from CME subnets module, we can combine @_dirkjan’s adidnsdump with @pdiscoveryio mapcidr to get a nicely formatted list of the target intranetworks 🕸 #ad #dns

snovvcrash's tweet photo. [#HackTip ⚒] When there’s not much info revealed about AD sites from CME subnets module, we can combine @_dirkjan’s adidnsdump with @pdiscoveryio mapcidr to get a nicely formatted list of the target intranetworks 🕸

#ad #dns https://t.co/uRhfx7cQFu

5

298

85

79

0

Zeeshan Ali Shah, PhD @ZeeshanAliShah

almost 4 years ago

#hacktip nc -nlvp 5656 > puppo (Recieve file via nc) On sender machine run nc -nv IPofreciever 5656 < file-to-send The file sent will appear as puppo

0

sn🥶vvcr💥sh @snovvcrash

almost 4 years ago

[#HackTip 🛠] Some tips and links on how NTDS reversible encryption usage (means you can DCSync cleartext passwords) can be enumerated during an AD security assessment: 🔗 https://t.co/pjUzcqzxYK 🔗 https://t.co/km8ZhkrJrt #ntds #ad #adsecurity

snovvcrash's tweet photo. [#HackTip 🛠] Some tips and links on how NTDS reversible encryption usage (means you can DCSync cleartext passwords) can be enumerated during an AD security assessment:

🔗 https://t.co/pjUzcqzxYK
🔗 https://t.co/km8ZhkrJrt

#ntds #ad #adsecurity https://t.co/AdAlQJDz37

1

133

50

30

0

El tío Acuedu𝕏to 

@acueductoqro

almost 4 years ago

#HackTip Si tienes un restaurante, crea un perfil de Tinder y diles a tus Matchs que los verás ahí, que vayan pidiendo. Luego les escribes y les dices que algo paso y no podrás llegar. Clientes seguros.

2

33

3

0

sn🥶vvcr💥sh @snovvcrash

about 4 years ago

[#HackTip 🛠] (1/2) Until I finally get around to watching @ippsec’s video on parsing #BloodHound JSONs with jq, I continue using my crappy Python script for printing neo4j node names in console 🐕 https://t.co/Tjm65TCVdU #bloodhound #cypher

ippsec

@ippsec

about 4 years ago

Just uploaded a video on parsing Bloodhound Data with JQ, which allows us to create a lot of interesting lists. My favorite one is looking at passwords that have a set time newer than their last logon time. https://t.co/ZhbHN0KQyQ

7

327

78

43

0

3

110

28

0

sn🥶vvcr💥sh @snovvcrash

about 4 years ago

[#HackTip ⚒] So, you’ve got a DA but feel like missing some plaintext credz or other valuable info in the infrastructure? Inspecting sensitive users’ habits by shadow monitoring their RDP sessions may set you on the right path 👀 #ad #pentest #rdp #shadow

snovvcrash's tweet photo. [#HackTip ⚒] So, you’ve got a DA but feel like missing some plaintext credz or other valuable info in the infrastructure? Inspecting sensitive users’ habits by shadow monitoring their RDP sessions may set you on the right path 👀

#ad #pentest #rdp #shadow https://t.co/CFKoRebnnM

2

249

73

75

0

El tío Acuedu𝕏to 

@acueductoqro

over 4 years ago

#Hacktip RECUERDEN SOBRINOS: 👌🏻 😉 — Perejil con "P" de pirámide. — Cilantro con "C" de circulo.

3

44

12

3

0

Miguel Maestre @migmae

over 5 years ago

Tip de seguridad: si recorres un edificio buscando Wifi y Bluetooth es fácil ver qué chismes tienes por casa, TVs modernas sobre todo, cámbiales el nombre, no des pistas a los amigos de lo ajeno de lo que tienes en tu vivienda #hacktip

migmae's tweet photo. Tip de seguridad: si recorres un edificio buscando Wifi y Bluetooth es fácil ver qué chismes tienes por casa, TVs modernas sobre todo, cámbiales el nombre, no des pistas a los amigos de lo ajeno de lo que tienes en tu vivienda #hacktip https://t.co/6JEWK0P9By

0

1

0

Top Tweets for #HackTip

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users