Password Attacks
Windows Password Attacks Registry Hives - HKLM\SAM - hashes for local user accounts - HKLM\SYSTEM - system boot key req'd to decrypt SAM database - HKLM\SECURITY - sensitive info used by LSA,...
Active Directory Exploitation
Username Harvesting $ kerbrute userenum --dc 10.129.201.57 --domain victim.local names.txt Password Harvesting It's possible to create a show copy of the C drive and then pull the ntds.dit from...
Wed 08 July 2026
exploitation
Active Directory Enumeration
Overview Enterprise environments tend to use active directory to manage the large number of users, devices and group policy across an organization. Misconfigurations inside of Active Directory can...
Sun 05 July 2026
information_gathering
Troubleshooting
MTU Blackholes All networks have a Maximum Transmission Unit - the largest packet that it can carry. When data is sent over multiple hops, each hop may have a different MTU. Normally, routers send...
Wed 17 June 2026
information_gathering
Metasploit Basics
What is Metasploit? The Metasploit Framework is an open-source penetration testing framework maintained by Rapid7 (the company behind InsightVM, Exposure Management, MDR and more). The official...
Sun 28 June 2026
intro