Emanuel Duss emanuelduss

Kerberos cheatsheet

Bruteforcing

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

Red Team Phishing with Gophish

This guide will help you set up a red team phishing infrastructure as well as creating, perform and evaluate a phishing campaign. This is the basic lifecycle of your phishingn campaign:

+---------------------+
|Get Hardware         |   Order / setup a vServer
+---------------------+
+---------------------+
|Setup                |   Install Gophish & Mail Server
+---------------------+

Programming Media Keys on the Ducky One 2 Skyline

To use media keys on the Ducky One 2 Skyline, you must record a macro to bind the media function to a hotkey combination, i.e. Fn plus some key.

Example

Important: In the instructions below, "Press X+Y+Z" means press and hold key X, press and hold key Y, press and hold key Z in that order, and then release all three.

As an example, to bind Fn+PgUp to the play/pause media function:

Operational PGP

This is a guide on how to email securely.

There are many guides on how to install and use PGP to encrypt email. This is not one of them. This is a guide on secure communication using email with PGP encryption. If you are not familiar with PGP, please read another guide first. If you are comfortable using PGP to encrypt and decrypt emails, this guide will raise your security to the next level.

	# import the necessary toolsets
	Import-Module .\powermad.ps1
	Import-Module .\powerview.ps1

	# we are TESTLAB\attacker, who has GenericWrite rights over the primary$ computer account
	whoami

	# the target computer object we're taking over
	$TargetComputer = "primary.testlab.local"

	#include "stdafx.h"

	int main()
	{
	ICLRMetaHost *metaHost = NULL;
	IEnumUnknown *runtime = NULL;
	ICLRRuntimeInfo *runtimeInfo = NULL;
	ICLRRuntimeHost *runtimeHost = NULL;
	IUnknown *enumRuntime = NULL;
	LPWSTR frameworkName = NULL;

	$appEvents = Get-WinEvent -LogName "Microsoft-Windows-Windows Defender/Operational" \|
	Where-Object {$_.Id -eq "1123"}
	$allBlockedProcesses = (
	$appEvents \|
	ForEach-Object {
	(([xml]$_.ToXml()).Event.EventData.Data \|
	Where-Object {
	$_.Name -eq "Process Name"
	}).'#text'
	} \|

	import sys


	def to_octets(ip):
	return [int(i) for i in ip.split('.')]


	def dotless_decimal(ip):
	octets = to_octets(ip)
	result = octets[0] * 16777216 + octets[1] * \

	#!/usr/bin/python2

	"""
	Use scapy to modify packets going through your machine.
	Based on nfqueue to block packets in the kernel and pass them to scapy for validation
	"""

	import nfqueue
	from scapy.all import *
	import os