This page contains a collection of methods for connecting to a remote Windows system from Linux and examples of how to execute commands on Windows machines remotely from Linux using number of different tools. It covers over 30 different methods for obtaining remote shell, remote command execution or connecting to a remote desktop using variety […]
Accessing Windows Systems Remotely From Linux Read More »
Most organizations and business around the world today use Active Directory in their infrastructure as central management solution for managing their resources. But as any other similar technology, Active Directory is very complex and securing it requires significant effort and years of experience. This article provides practical information on how to pentest Active Directory environments
Top 16 Active Directory Vulnerabilities Read More »
Have you ever wondered what are the most common vulnerabilities found during penetration tests? What are some of the typical security problems of corporate networks? In this article we will be going through the Top 10 list of the most reported vulnerabilities during internal infrastructure penetration tests. Disclaimer The following information was compiled from more
Top 10 Vulnerabilities: Internal Infrastructure Pentest Read More »
In this part of our RCE series we will be looking closely on the Keimpx tool – one of the first tools designed for pentesting of large Windows networks. This is the 4th part of the blog post series focused on tools for performing remote command execution (RCE) on Windows machines from Linux (Kali). Introduction
RCE on Windows from Linux Part 4: Keimpx Read More »
In this article we will look closely on how to use Impacket to perform remote command execution (RCE) on Windows systems from Linux (Kali). This is the 1st part of the upcoming series focused on performing RCE during penetration tests against Windows machines using a typical hacker toolkit and penetration testing tools. Introduction I’m sure
RCE on Windows from Linux Part 1: Impacket Read More »
During penetration tests, we sometimes encounter a Firebird database installation running on the network. It typically runs on port tcp/3050 and often times it is configured with default credentials SYSDBA/masterkey. What can we do with this? Can we get a shell? In this article, we will explore our options. Introduction For those who are completely
Firebird Database Exploitation Read More »
