Padelify TryHackMe Scanning Using Custom Script └─# python3 Fast_Port.py -H 10.48.175.116 [+] Scan Results For: 10.48.175.116 [+] 22/tcp open [+] 80/tcp open Using Rustscan rustscan -a ip -- ...

NoSQL Injection Think of it like this: Traditional SQL databases use structured query language (SQL), but NoSQL databases use different query methods - often JSON,BSON, JavaScript, or specialized q...

HTML Injection iframe Embedding External Content: The src attribute specifies the file of the document to embed. Try to grab the id_rsa key home/<username>/.ssh/id_rsa Try to find ...

Kerberos Unconstrained Delegation Unconstrained Delegation is a feature in Active Directory that allows designated services to act on behalf of users and request access to other network resourc...

Microsoft SQL server Microsoft SQL Server is a relational database management system (RDBMS) developed by Microsoft, designed to manage and organize data in a structured way using tables that ar...

NTLM Relay NTLM Relay is a man-in-the-middle (MITM) attack against the NTLM authentication protocol. When an NTLM authentication occurs between two machines (a client and a server), an attacker...

AD Computers Active Directory Domain Services (AD DS) manages users, computers, and data, allowing administrators to organize resources into logical hierarchies and centralize access control. Ke...

ESC1 Attack An ESC1 attack is a privilege escalation technique that exploits misconfigured certificate templates within Microsoft Active Directory Certificate Services (AD CS) to gain unauthori...

Linux Hunt Show I create some short cuts to find the Important thinks in the linux system. Intersting Files /etc/passwd —> store Usersname of the box. /etc/shadow —> store the Password has...

Rustykey HTB Walkthrough for the Rustykey machine (Active Directory). Edited by 0xmr. Machine Information You start the Rustykey box with credentials for the following account: Username:...