ntdsxtract.com

myotherpcisacloud.com

myotherpcisacloud.com | Powershell

https://www.myotherpcisacloud.com/category/Powershell

Mostly) Microsoft technology, until it hurts. AD Is Full of Bitmasks, Decipher Them with Powershell. Get-ADObject -LDAPFilter "(objectClass=attributeSchema)" ` -SearchBase (Get-ADRootDSE).schemaNamingContext ` -Properties SystemFlags. This is where the magic of enumerations comes in. Bit 26 are all turned on? This is why enums are our friends. Let's retry our Powershell command using the enum now:. Get-ADObject -LDAPFilter "(objectClass=attributeSchema)" ` -SearchBase (Get-ADRootDSE).schemaNamingCont...

dsinternals.com

Vykrádanie hesiel zo zálohy Active Directory – Directory Services Internals

https://www.dsinternals.com/sk/vykradanie-hesiel-zo-zalohy-active-directory

Vykrádanie hesiel zo zálohy Active Directory. Nedávno som písal o príkaze Get-ADReplAccount. Pomocou ktorého je možné vzdialene vytiahnuť heslá a iné citlivé informácie z doménového kontroléru. Tieto dáta sú na každom doménovom kontroléri uložené v súbore ndts.dit. A odtiaľ sa dajú získať aj napriamo. Dokáže to napríklad nástroj NTDSXtact. Ale ten je určený pre Linux, nemá moc jednoduché ovládanie a na väčších databázach je dosť pomalý. Preto som do svojho PowerShell modulu DSInternals. Nová verzia modul...

myotherpcisacloud.com

myotherpcisacloud.com | PSNTDS

https://www.myotherpcisacloud.com/post/psntds

Mostly) Microsoft technology, until it hurts. Send-OutlookMailMessage with Voting Options. NTDSdit (Microsoft Active Directory) forensics module for Powershell. Find it on Github here. Current bug: Unencrypted NT hashes are incorrect! This Powershell module is intended to aid in the process of examining and extracting information from the Active Directory database known as NTDS.dit. Special thanks to Csaba Barta ( csaba.barta@gmail.com. Without whom this module would not be possible. This blog is about e...

security.sunera.com

Sunera Information Security Blog: May 2014

http://security.sunera.com/2014_05_01_archive.html

Friday, May 16, 2014. Full Disk Encrypted Kali™ AWS Instance. This post will detail instructions on how to create a full disk encrypted Kali ™. Instance running on AWS EC2. The gist of what we'll do is spin up a Kali instance from the Offensive Security. For the sake of this tutorial it will be assumed that the reader has a solid understanding of using AWS and starting instances, etc. This is not a tutorial on how to launch instances, or an introduction to using AWS EC2. The Tools and Prep. Wget http:/ w...

govolution.wordpress.com

govolution | govolution

https://govolution.wordpress.com/author/govolution

About assembler and stuff. October 24, 2016. The first 15 days of a password honeypot. A couple of days ago I started running a password honeypot based on heralding. Here is some first analysis and wordlists. Time frame of this analysis. Head heralding activity.log -n 2 cut -d “,” -f1. Tail heralding activity.log -n 1 cut -d “,” -f1. Cat heralding activity.log cut -d “,” -f9 sort wc -l. Cat heralding activity.log cut -d “,” -f9 sort -u wc -l. Most hits from one ip. 365 118.68.52.154. 2016-10-07 19:33:34&...

myotherpcisacloud.com

myotherpcisacloud.com | Active Directory

https://www.myotherpcisacloud.com/category/Active-Directory

Mostly) Microsoft technology, until it hurts. It is my sincere honor to inform you that you may now also find me waxing poetic on the AskDS blog, Microsoft's official enterprise support blog for AD DS and more. Special thanks to the superstars. That came before me and inspired me to get to where I've always wanted to be. AD Is Full of Bitmasks, Decipher Them with Powershell. This is where the magic of enumerations comes in. Bit 26 are all turned on? Get-ADObject -LDAPFilter "(objectClass=attributeSchema)...

myotherpcisacloud.com

myotherpcisacloud.com | Computer Security

https://www.myotherpcisacloud.com/category/Computer-Security

Mostly) Microsoft technology, until it hurts. NTDSdit (Microsoft Active Directory) forensics module for Powershell. Find it on Github here. Current bug: Unencrypted NT hashes are incorrect! This Powershell module is intended to aid in the process of examining and extracting information from the Active Directory database known as NTDS.dit. Special thanks to Csaba Barta ( csaba.barta@gmail.com. Without whom this module would not be possible. Also thanks to Brendan Dolan-Gavitt, author of creddump. Allocate...

tylerapplebaum.github.io

tylerapplebaum.ps1

http://tylerapplebaum.github.io/getntdshashes.html

Github link to Get-NTDSHashes.ps1 and all relevant files. Password audits can be a tricky proposition. Many higher-ups need to sign off on the idea, possibly even board members. But you'll never know about that. One day, your boss will catch you walking by and tell you that you need to test the user's Active Directory passwords against dictionary attacks. First thought: my wordlist will finally get some use. Second thought: How exactly do I go about this? After some research, I found that mubix. Invoke-N...