In this article, we will be discussing the concept of Credential Dumping and LAPS (Local Administrator Password Solution). We will delve into the world of
After working on Pass the Hash attack and Over the pass attack, it’s time to focus on a similar kind of attack called Pass the
Active Directory Credential Dumping DCSync Attack is a specialized technique used by attackers to extract credentials from a domain controller (DC) by simulating the behavior
In this post we will discuss “How the attacker uses the Microsoft office for phishing attack to get the NTLM hashes from Windows.” Since we
Pass the Ccache is a credential access and lateral movement technique where an attacker steals or generates a Kerberos ccache file containing a valid TGT, then uses
This article walks through a complete, hands-on password-spraying workflow against a Windows Server 2019 Domain Controller (192.168.1.7, ignite.local) using a curated list of usernames (users.txt)
In this post, we’re going to talk about Over Pass the hash that added another step in passing the hash. Pass the hash is an
In this post, we delve into the exploitation of Kerberos accounts with pre-authentication disabled, commonly known as AS-REP Roasting. Specifically, this attack targets user accounts
In this article, we learn to use crackmapexec. This tool is developed by byt3bl33d3r. I have used this tool many times for both offensive and