It is well known that SSH is a secure network protocol, inherently safe from network packet sniffing and eavesdropping. This is of course thanks to its use of encryption. If we are using SSH protocol safely, the risks of man-in-the-middle attacks are truly minimal. However, this doesn’t mean that SSH is 100% secure from all […]
SSH Sniffing (SSH Spying) Methods and Defense Read More »
In this article we are going to demystify and answer one very important question when it comes to passwords. There are many people who are wondering whether it is a good idea to use spaces in passwords or not. If you are also wondering, read on. Hopefully this article will answer all your questions. Data
Spaces in Passwords – Good or a Bad Idea? Read More »
It’s time for another dose of bug bounty tips from the bug hunting community on Twitter, sharing their knowledge for all of us to help us find more vulnerabilities and collect bug bounties. This is the 9th part and in each part we are publishing 10 or more tips. Let’s start! 1. Bypass 403 errors
Bug Bounty Tips #9 Read More »
This article contains a list of PowerShell commands collected from various corners of the Internet which could be helpful during penetration tests or red team exercises. The list includes various post-exploitation one-liners in pure PowerShell without requiring any offensive (= potentially flagged as malicious) 3rd party modules, but also a bunch of handy administrative commands.
PowerShell Commands for Pentesters Read More »
Most organizations and business around the world today use Active Directory in their infrastructure as central management solution for managing their resources. But as any other similar technology, Active Directory is very complex and securing it requires significant effort and years of experience. This article provides practical information on how to pentest Active Directory environments
Top 16 Active Directory Vulnerabilities Read More »
Have you ever wondered what are the most common vulnerabilities found during penetration tests? What are some of the typical security problems of corporate networks? In this article we will be going through the Top 10 list of the most reported vulnerabilities during internal infrastructure penetration tests. Disclaimer The following information was compiled from more
Top 10 Vulnerabilities: Internal Infrastructure Pentest Read More »
Introducing another addition to our portfolio of tools designed for restricted environments – a minimalistic SMB brute force attack and password spraying tool SMBLogin.ps1. This compact SMB login attack tool was written in pure PowerShell and it comes handy in specific attack simulations where we cannot use any traditional or typical pentesting tools. Introduction Although
SMB Brute Force Attack Tool in PowerShell (SMBLogin.ps1) Read More »
In this guide we will go through Cisco password types that can be found in Cisco IOS-based network devices. We will cover all common Cisco password types (0, 4, 5, 7, 8 and 9) and provide instructions on how to decrypt them or crack them using popular open-source password crackers such as John the Ripper
Cisco Password Cracking and Decrypting Guide Read More »
This article introduces adlogin.ps1 – a minimalistic Active Directory login brute force tool written in pure PowerShell. This tiny little tool can be useful in specific attack simulations and scenarios where it is impossible to use any other standard tool from a typical hacker’s toolkit. Why another AD / LDAP brute force attack tool? It’s
Active Directory Brute Force Attack Tool in PowerShell (ADLogin.ps1) Read More »
Many people ask this question: Can Wireshark capture passwords? Well, the answer is definitely yes! Wireshark can capture not only passwords, but any kind of information passing through the network – usernames, email addresses, personal information, pictures, videos, anything. As long as we are in position to capture network traffic, Wireshark can sniff the passwords
Capture Passwords using Wireshark Read More »
