VB. Active Directory. HTB Machines. These are a few of my favourite things.
UK
Joined March 2020
- Tweets755
- Following44
- Followers1.3K
- Likes1.2K
VbScrub retweeted
Hacking 101
if ur doing a RED TEAM, remember to use disguises - PRETEND to be a printer or MFD. if somsone spots you in the corridor just start throwing paper all over the floor and screaming ERROR ERROR #badRedTeamTips
VbScrub retweeted
Nope, this isn't about breakfast 🍳
Scrambled #Medium #Windows Machine created by VbScrub will go live 11 June 2022 at 19:00:00 UTC.
Meta will be retired! Join now and start #hacking: hackthebox.com
#HackTheBox #CyberSecurity #InfoSec #NewRelease
VbScrub retweeted
#DSInternals 4.6 has just been released. Offline modification of #ActiveDirectory databases is now supported on Windows Server 2022, including password resets, SID history injection, group membership changes, and enabling/disabling accounts. #PowerShell github.com/MichaelGrafnetter…
ALT Screendhot of the Set-ADDBAccountPassword cmdlet running on Windows Server 2022.
VbScrub retweeted
NTLM is frowned upon. But is Kerberos really that secure? One thing is for sure, Kerberos is far from being understood by the admins, and default configurations are too much trusted
✨ Patch, update, learn, harden, mitigate, detect, prevent, compartmentalize ✨
..or get pwned
VbScrub retweeted
Blog from @ippsec and me on the @hackthebox_eu blog - Finding that balance between not giving up too early and being pointlessly stuck is important. But the answer isn't "never seek help". Trying harder isn't always the answer when you're trying to learn.
hackthebox.com/blog/It-is-Ok…
VbScrub retweeted
Delegate to KRBTGT service to get TGT for any users ! Thanks @cnotin for the help 🙏
skyblue.team/posts/delegate-…
VbScrub retweeted
Certipy is a Python tool to enumerate and abuse misconfigurations in Active Directory Certificate Services (AD CS). By @ollypwn
github.com/ollypwn/Certipy
VbScrub retweeted
Are you doing write ups for THM, retired HTB, or another platform? Might I suggest you also include how long it took you to perform each step, if you also had to use another write up or how long your enumeration took? It might help boost the confidence of people just starting out
VbScrub retweeted
Thread: (1/8)
@Belastingdienst gave me the go-ahead to share the story of how the Lamest Hacker You Know® received this epic #ResponsibleDisclosure award from them.
Looking back on it I don't think I can tell it any better than this chat log interaction, so here it is raw:
VbScrub retweeted
As a security person I appreciate all the browser and system features that make it harder for users to accidentally download and run malware.
As someone who just spent 15 minutes trying to get a malicious driver I need for testing, fuck this.
VbScrub retweeted
Woke up on this first day of 2022 to find the internet (Exchange) is on fire due to a 32-bit INT overflow and today’s date.
Don’t ever change, compsci.
VbScrub retweeted
Christmas gift 🎄🎁 from @m3g9tr0n and I ✨
You probably already know The Hacker Recipes (thehacker.recipes), let me introduce The Hacker Tools (tools.thehacker.recipes).
This project aims at providing documentation on some tools, starting with @gentilkiwi's Mimikatz 🥝
VbScrub retweeted
[thread 🧵] lets all welcome the new kid in town 😈
✨ Kerberos sAMAccountName spoofing ✨ from regular user to domain admin, because Microsoft didn't care enough about it's $$$
thehacker.recipes/ad/movemen…
