#secretsdump - Twitter Hashtag

about 3 years ago

While we wait for the PR to merge dissect.esedb support into #Impacket, you can already enjoy a 500-1000% performance bump yourself by using our Dissect #secretsdump shim! Read more here: https://t.co/dmbZnmGHMx

1

37

12

5

9K

OtterHacker @OtterHacker

about 3 years ago

Yey ! I just have to pack this in a nice #Impacket function and add the option in #Secretsdump ! WinXP source code helped me to successfully map NTDS columns with its content ! Never though I would one day have to look at this code 😊

OtterHacker's tweet photo. Yey ! I just have to pack this in a nice #Impacket function and add the option in #Secretsdump !

WinXP source code helped me to successfully map NTDS columns with its content ! Never though I would one day have to look at this code 😊 https://t.co/1VtRHGR8bB

0

19

3

1

3K

OtterHacker @OtterHacker

about 3 years ago

Diving into NTDS format to extract TDO password from already dumped #NTDS and avoid additional #DCSync. The #Secretsdump and #Mimikatz code are really useful May push it on Impacket once finished and tested If it is already implemented I would be glad to know how to use it ! 🥹

0

7

2

1

827

IT news for all 🇺🇦 @IT_news_for_all

over 3 years ago

#dcsync #secretsdump Bypassing IDS DCSync Signature for secretsdump Thanks to: @snovvcrash https://t.co/0UlXJ0nmT9... https://t.co/XvtXVX2k1n

IT_news_for_all's tweet photo. #dcsync #secretsdump

Bypassing IDS DCSync Signature for secretsdump

Thanks to: @snovvcrash
https://t.co/0UlXJ0nmT9... https://t.co/XvtXVX2k1n https://t.co/qIOHpFEjhc

0

32

sn🥶vvcr💥sh @snovvcrash

over 3 years ago

🧵 (1/) Bypassing IDS DCSync Signature for #secretsdump I’ve been asked lately to bypass a private IDS rule for #impacket’s DCSync operation and I’ve immediately remembered this Charlie’s question ⬇️

Charlie Bromberg « Shutdown » @_nwodtuhs

over 4 years ago

If you wondered why you need a CIFS SPN for secretsdump, and an LDAP SPN for Mimikatz, know one thing, you're not alone 🥲 If you do know why, halp, pleaz ❤️

_nwodtuhs's tweet photo. If you wondered why you need a CIFS SPN for secretsdump, and an LDAP SPN for Mimikatz, know one thing, you're not alone 🥲

If you do know why, halp, pleaz ❤️ https://t.co/fbeetumMqk

3

85

25

29

0

10

531

170

216

107K

Network Intelligence

@niiconsulting

over 3 years ago

#QuickScan: Agrius APT actors using a new Fantasy data wiper in supply-chain attacks Read More:https://t.co/flHA8DufeL #Cybersecurity #NetworkIntelligence #SupplyChainAttacks #DataWiper #Agrius #Threat #APT #CyberAttacks #Technology #Vulnerabilities #MiniDump #SecretsDump

niiconsulting's tweet photo. #QuickScan: Agrius APT actors using a new Fantasy data wiper in supply-chain attacks

Read More:https://t.co/flHA8DufeL

#Cybersecurity #NetworkIntelligence #SupplyChainAttacks #DataWiper #Agrius #Threat #APT #CyberAttacks #Technology #Vulnerabilities #MiniDump #SecretsDump https://t.co/UElBRFoQup

0

Rémi GASCOU (Podalirius)

@podalirius_

over 4 years ago

Coming next on @SecureAuth's impacket #secretsdump, automatic decoding of #Windows service control manager passwords extracted from the LSA. 🥳🎉 https://t.co/8GK2CeosOW #ProTip: It's always a good idea to spray these passwords as there might be password reuse on other services

0

45

16

7

0