Web Exploitation

Cross-Site Scripting (XSS)

SQL Injection

Server-Side Request Forgery

Server-Side Template Injection

OAuth Security

Windows Security

Active Directory Certificate Services

Resource-Based Constrained Delegation

DCSync Attack

Local Administrator Password Solution

Kerberos Attacks

Penetration Testing

Network Reconnaissance

Credential Hunting

System Enumeration

Mimikatz Commands

BloodHound Analysis

Scripts & Tools

JWT Token Creator

Forward Shell Script

LDAP Data Exfiltration

Quick Setup Ligolo

PBKDF2 Hash Cracking

Hack the Box Easy Machine - Down

Using the Previse machine we will demonstrate the EAR vulnerability. For this we are going to use Burp

Hack the Box Easy Machine - Reset

Using the Previse machine we will demonstrate the EAR vulnerability. For this we are going to use Burp

Havoc SSRF with RCE

We will see how a simple SSRF can turn into RCE if done right. Havoc is an OSCP-style attack box provided by HTB and it's a machine full of real-world scenarios

Questions?