SMB-enum ➜ timelapse nxc smb 10.10.11.152 SMB 10.10.11.152 445 DC01 [*] Windows 10 / Server 2019 Build 17763 x64 (name:DC01) (domain:timelapse.htb) (signing:True) (SMBv1...

SMB-enum ➜ cascade nxc smb 10.10.10.182 -u '' -p '' --shares SMB 10.10.10.182 445 CASC-DC1 [*] Windows 7 / Server 2008 R2 Build 7601 x64 (name:CASC-DC1) (domain:cascade.loca...

WebServerSQLi abdef' union select 1,name,3,4,5,6 FROM master..sysdatabases;-- - abdef' union select 1,name,3,4,5,6 FROM master..sysdatabases;-- - abdef' union select 1, STRING_AGG(CONCAT(table_n...

SMB-enum ➜ Monteverde nxc smb 10.10.10.172 SMB 10.10.10.172 445 MONTEVERDE [*] Windows 10 / Server 2019 Build 17763 x64 (name:MONTEVERDE) (domain:MEGABANK.LOCAL) (signing:True...

SMB-enum ➜ Support nxc smb 10.10.11.174 SMB 10.10.11.174 445 DC [*] Windows Server 2022 Build 20348 x64 (name:DC) (domain:support.htb) (signing:True) (SMBv1:False) ➜ ...

after getting usernames at Website use username-anarchy for create users list username-anarchy (myenv) ➜ username-anarchy git:(master) ./username-anarchy --input-file ../usernames.txt --select-f...

SMB enum ➜ active nxc smb 10.10.10.100 SMB 10.10.10.100 445 DC [*] Windows 7 / Server 2008 R2 Build 7601 x64 (name:DC) (domain:active.htb) (signing:True) (SMBv1:False)...

SMB-enum ➜ forest nxc smb 10.10.10.161 SMB 10.10.10.161 445 FOREST [*] Windows Server 2016 Standard 14393 x64 (name:FOREST) (domain:htb.local) (signing:True) (SMBv1:True) ...

In modern red teaming and penetration testing, understanding the intricacies of Active Directory (AD) permissions is essential for successful lateral movement and privilege escalation. One powerful...

Unveiling the Power of SeImpersonatePrivilege and Enumerating MSSQL In the world of cybersecurity, privilege escalation and enumeration often play pivotal roles in uncovering vulnerabilities withi...