VbScrub

VB. Active Directory. HTB Machines. These are a few of my favourite things.

[VbScrub @VbScrub]

@cbbn0_0 @hackthebox_eu hey, sorry only just seen this. Not sure if I'll get round to making any more videos on this channel tbh but I guess never say never

[VbScrub @VbScrub]

My latest machine will be going live on @hackthebox_eu later today (19:00 UTC).

If you have a go at it, I'd be keen to hear what you think. Obviously won't be giving out any spoilers though.

#HackTheBox #pentesting #InfoSec #hacking #ethicalhacking

[mRr3b00t @UK_Daniel_Card]

Hacking 101

if ur doing a RED TEAM, remember to use disguises - PRETEND to be a printer or MFD. if somsone spots you in the corridor just start throwing paper all over the floor and screaming ERROR ERROR #badRedTeamTips

[VbScrub @VbScrub]

@UK_Daniel_Card I remember the first time someone sent me a https://t.co/lyukxVUlCe link I was like PFFT HOW STUPID DO YOU THINK I AM... and then it turned out that's a legit youtube link now. At that moment I realised you can no longer rely on recognising trusted domains

[VbScrub @VbScrub]

@_JohnHammond it really bothers me that ANY font uses the exact same "image" for more than one different letter. You literally had one job

[VbScrub @VbScrub]

@elvith_de @vxunderground honestly at first glance I just assumed they were ads already lol

[VbScrub @VbScrub]

@l_buretm @NahamSec @hackthebox_eu ah cool, glad to hear that :)

[VbScrub @VbScrub]

@chiclematicao @NahamSec @hackthebox_eu hmmm that's the opposite of what their guide for machine makers says (and the opposite of my experience with the machines). Their guide specifically says easy and medium machines should not have any rabbit holes

[VbScrub @VbScrub]

@NahamSec @hackthebox_eu Its very hard though because everyone has different levels of experience in different areas. What's easy for you might be hard for someone else and vice versa. I've made a few machines for them and never have any idea how to rank them

[VbScrub @VbScrub]

@l_buretm @NahamSec @hackthebox_eu If you've not already tried Cascade and Scrambled, they're two AD related ones that I made that most people seem to enjoy

[VbScrub @VbScrub]

@0x68306767 @NahamSec @hackthebox_eu eyy glad to see mine being recommended :)

[VbScrub @VbScrub]

I realise I'm very late to the party... but if you're even remotely interesting in hacking and infosec stuff, I can't say enough good things about @JackRhysider's podcast, @DarknetDiaries
Been binging it the last few nights before I go to sleep and every episode has been great

[VbScrub @VbScrub]

@_v1b35 thanks, glad it helps people out :)

[VbScrub @VbScrub]

All I want for xmas is to not have to click allow cookies on literally every website I visit

[VbScrub @VbScrub]

@MayankM0 no worries :) hope it helped

[VbScrub @VbScrub]

@yarden_shafir I legit found one in someone else's C# code that takes 52 arguments

[VbScrub @VbScrub]

@vzverovich C++ is so obtuse I have no idea if this whole thread is a joke or not

[VbScrub @VbScrub]

@AmiineQu you might be waiting a while 😅

[VbScrub @VbScrub]

@alexjbutcher @eric_capuano @RGKelley5 @c_APT_ure great soundbite, shame it doesn't apply to the real world

[VbScrub @VbScrub]

@SteveSyfuhs @jakob_dahl @rafal_fitt @lkarlslund I'm sure the is some scenario where it could cause a problem, but in the real world when you just added a user to a group that grants them some extra permissions on a file share, it is absolutely fine.