All Security Engineering Courses

💻 TREVORproxy This is a simple SOCKS proxy that helps avoid Smart Lockout by load-balancing your requests between multiple IP addresses. It accomplishes this with built-in Linux features -- no complex OpenVPN setups or strange firewall configurations. There are two techniques that TREVORproxy can use to spread your requests across multiple IP addresses: an SSH Proxy and a Subnet Proxy. — SSH Proxy You give TREVORproxy some hosts that support SSH, and it sends your traffic through them, making sure to balance equally between all the hosts. — Subnet Proxy If you have access to a /64 IPv6 subnet (Linode is perfect for this), TREVORproxy will load-balance your requests across eighteen quintillion (18,446,744,073,709,551,616) unique source addresses. 🔗 Source: https://github.com/blacklanternsecurity/TREVORproxy #ip #rotation #waf #bypass

DavRelayUp - a universal no-fix LPE in domain-joined windows workstations where LDAP signing is not enforced (the default settings). https://github.com/Dec0ne/DavRelayUp #ad #redteam #pentest #lpe

These are technical Questions for Red Teaming: 1. First They probably will ask you common AD attacks such as kerbroasting, gold/silver ticket dumping hashes, NTDS.dit Extraction. 2. Infrastructure opsec and command&control: - Domain fronting, c2 infrastructure, The MITRE framework , HTTP relays, SMTP forwarders, redirectors whole other(network) stuff. Having red-team infrastructure would be nice. 3. Post exploitations : - Maintaining Access Data Harvesting Weak Password Cracking •Windows APIs for code execution •Behaviours -write file to disk -execute program -process injection •Process context(event property) -explorer.exe,lsas.exe,rundll.exe,svchost.exe - commonly abused applications 4. Privilege escalation Bypassing UAC Get SYSTEM 5. Lateral movement Pass the hash,Pass the ticket Exploiting remote services,powershell remoting, WMI,WINRM,PSEXEC , windows admin shares, Access token so on. 5. Persistence:- Sticky keys backdoor, schtasking, Pivoting, Port scan etc