Aayush Pareek – Medium

3 days ago

Active Directory: Post-Compromise Attacks — Pass the Hash / Password Attacks

Pass-the-Password attack is a technique whereby an attacker captures a password hash and crack it then simply passes it through for authentication and potentially lateral access to other networked systems. Pass-the-Hash attack is a technique whereby an attacker captures a password hash and then simply passes it through for authentication…

Pass The Hash

4 min read

Jul 29

Active Directory: Initial Attack Vector — DNS Takeover via IPv6 Attack and Defense

Today we will learn how to perform DNS Takeover via IPv6 attack against the AD environment. I am using 4 VMs. Windows Server 2019 :- IP Address: 10.20.30.40 Windows 10 Pro:- IP Address: 10.20.30.49 Windows 10 Pro:- IP Address: 10.20.30.42 Kali Linux 2022.2:- IP Address: 10.20.30.43 How and Why does it work? IPv6 has been enabled…

Active Directory

4 min read

Jul 13

Active Directory: Initial Attack Vector — SMB Relay Attack and Defense

SMB is commonly used for sharing files, printers and communication between client and server. Today we will learn how to perform SMB Relay attack against the AD environment. I am using 4 VMs. Windows Server 2019 :- IP Address: 10.20.30.40 Windows 10 Pro:- IP Address: 10.20.30.41 (has admin credentials on…

Smb Relay

5 min read

Jul 13

Active Directory: Initial Attack Vector — LLMNR poisoning Attack and Defense

Link-Local Multicast Name Resolution (LLMNR) and NetBIOS Name Service (NBT-NS) are Microsoft Windows components that serve as alternate methods of host identification. LLMNR is based upon the Domain Name System (DNS) format and allows hosts on the same local link to perform name resolution for other hosts. …

Active Directory

3 min read

May 27

Hack The Box — Blue (Exploiting MS17–010)

The following write up is for a machine labeled “Blue”. Blue is a Easy rated Windows machine on Hack The Box. We use the popular Eternal Blue exploit to get a Admin shell on the target. Machine: Blue OS: Windows IP address: 192.168.247.135 Objective Getting ROOT/Exploiting SMB — Using Metasploit to…

Ethical Hacking

3 min read

Hack The Box — Blue (Exploiting MS17–010)