Hacking Articles retweeted

The XSS Rat - Proud XSS N00b :-)@theXSSratOct 14
Belgium
BelgiumConnected via Belgium App StoreAccount-level information, not a live location or per-post device.
Credential dumping via LSASS, explained step by step with the tooling. Solid reference for anyone doing AD pentesting or prepping for OSCP/CRTP.
Credential Dumping: Local Security Authority (LSASS.exe)
🔥 Telegram: t.me/hackinarticles
✴ Twitter: xitter.cf/hackinarticles
Credential Dumping via LSASS targets the Local Security Authority Subsystem Service (lsass.exe), which stores sensitive authentication data like NTLM hashes, Kerberos tickets, and sometimes plaintext passwords in memory. Attackers dump this memory to extract credentials and escalate privileges.
📚 Topic Covered
📖 Introduction
🧠 Understanding LSA & LSASS
🔐 Credentials Stored in Memory
💉 Dumping LSASS Memory
🛠 Mimikatz
📦 ProcDump
⚙️ comsvcs.dll Technique
🧪 Windows Credential Editor (WCE)
🚀 Privilege Escalation using Dumped Credentials
🔄 Lateral Movement
🛡 Detection & Mitigation Techniques
📖 Article:
hackingarticles.in/credentia…
#CyberSecurity #RedTeam #Pentesting #EthicalHacking #CredentialDumping #WindowsSecurity #InfoSec
Hacking Articles retweeted
Extension Bypass V2
🔸 do.php%00.png
🔸 do.php%0A.png
🔸 do.php\n.png
🔸 do.php\u000a.png
🔸 do.php\u560a.png
🔸 do.php%E5%98%8A.png
🔸 do.php#.png
🔸 do.php%23.png
🔸 do.php\u0023.png
🔸 do.php;.png
🔸 do.php%3B.png
🔸 do.php\u003b.png
🔸 do.php\u563b.png
🔸 do.php%E5%98%BB.png
Hacking Articles retweeted
Did you know you can spot which servers and workstations have the WebClient (WebDAV) service running, straight from BloodHound-CE?🔥
A machine with WebClient running can be forced to authenticate over HTTP (PetitPotam/PrinterBug via WebDAV), then NTLM-relayed to LDAP for RBCD / Shadow Credentials, or to AD CS Web Enrollment (ESC8) to compromise the target.
This Cypher query surfaces them all at once, so you can prioritize targets:👇
MATCH (c:Computer)
WHERE c.webclientrunning = true
RETURN c LIMIT 1000
RustHound-CE v2.5.22 adds the WebClient collection method, run automatically with -c All
github.com/g0h4n/RustHound-C…
#RedTeam #ActiveDirectory #BloodHound
Hacking Articles retweeted
The AD Grave: Tombstoned objects🪦
If the AD Recycle Bin is enabled, objects are moved to the "Deleted Objects" container if they are "deleted". With the new "tombstone" NetExec module, you can query and restore such objects (given you have the privs).
Made by Fabrizzio🚀
Hacking Articles retweeted
ItsNotAlwaysSMB: DPAPI in other protocols🔥
SMB is monitored closely nowadays, stopping attacks like looting DPAPI secrets. Thanks to @_zblurx, NetExec got a huge upgrade, extending DPAPI credential dumping to other protocols such as WMI, WinRM and MSSQL and various modules🔑
Hacking Articles retweeted
Did you know MSSQL databases can be exposed via Named pipes ? Welp using Impacket we can now connect to these github.com/fortra/impacket/p…
Working on the integration on NXC 👀
Hacking Articles retweeted
If you want to learn Kerberos and all the delegation techniques, this is imho the best resource I have read so far: thattotallyrealmyth.gitbook.…
Shoutout to @abdo_mhanni for the detailed explanations and great illustrations. The wiki covers pretty much all of Kerberos.
Hacking Articles retweeted
Windows Privilege Escalation
01: Initial Enumeration niklas-heringer.com/penetrat…
02: Running through PrivEsc Paths from Zero niklas-heringer.com/skills-l…
Hacking Articles retweeted
🔥 Ethical Hacking Proactive Training – Live & Practical 🔥
Ready to build real-world cybersecurity skills with hands-on experience?
🚀 Ignite Technologies brings you a comprehensive Ethical Hacking Proactive Training Program designed with live sessions and core practical exposure — at an affordable price.
🔗 Register Now:
forms.gle/bowpX9TGEs41GDG99
💬 WhatsApp:
wa.me/message/HIOPPNENLOX6F1
📧 Email:
[email protected]
🎯 Book Your Demo Session Today!
📘 What You’ll Learn:
✅ Introduction to Ethical Hacking
✅ Old School Learning Methodology
✅ Networking Fundamentals
✅ Reconnaissance (Footprinting, Scanning & Enumeration)
✅ System Hacking
✅ Post Exploitation & Persistence
✅ Web Server Penetration Testing
✅ Website Hacking Techniques
✅ Malware Threats & Analysis
✅ Wireless Network Security
✅ Cryptography & Steganography
✅ Sniffing Attacks
✅ Denial of Service (DoS)
✅ Evading IDS, Firewalls & Honeypots
✅ Social Engineering Techniques
✅ Mobile Platform Security
💡 Whether you're a beginner or looking to strengthen your penetration testing skills, this training is structured to provide practical knowledge aligned with real-world attack scenarios.
Limited seats available. Secure yours now.
#CyberSecurity #EthicalHacking #Infosec #PenetrationTesting #RedTeam #NetworkSecurity #BugBounty #CyberSecurityTraining #InformationSecurity #TechCareers
Hacking Articles retweeted
Most OSCP students waste months watching random tutorials.
What actually matters?
👉 Methodology
👉 Enumeration
👉 Privilege Escalation
👉 Active Directory Attacks
🚨 OSCP Training – Admissions Open 🚨
Learn through practical labs & real-world attack scenarios:
🔓 Windows & Linux PrivEsc
🌐 Web Application Attacks
🏰 Active Directory Exploitation
🧠 Pivoting & Tunneling
🧬 Password Attacks
💣 Public Exploit Abuse
📋 Professional Report Writing
✅ Hands-On Training
✅ OSCP-Focused Approach
✅ Beginner to Advanced Guidance
🔥 Limited Seats Available
🔗 Register:
forms.gle/bowpX9TGEs41GDG99
💬 WhatsApp:
wa.me/message/HIOPPNENLOX6F1
📧 [email protected]
#OSCP #CyberSecurity #EthicalHacking #RedTeam #Pentesting #ActiveDirectory
Hacking Articles retweeted
🚨 Google Dorks Cheat Sheet for Pentesters
🔥 Telegram: t.me/hackinarticles
✴ Twitter: xitter.cf/hackinarticles
Google Dorking is a reconnaissance technique used by security researchers and bug bounty hunters to discover sensitive files, login portals, exposed directories, and vulnerabilities indexed by search engines. ()
⚡ Useful Google Dorks
🔎 site:target.com
📂 intitle:"index of"
🧠 inurl:admin
📄 filetype:pdf site:target.com
🔐 intitle:"login"
📁 intext:"username" filetype:log
🗄️ filetype:xls "email"
📡 inurl:phpinfo.php
🧾 inurl:/proc/self/cwd
📷 inurl:view/index.shtml
🧠 Mindmap:
github.com/Ignitetechnologie…
#CyberSecurity #BugBounty #OSINT #GoogleDorks #Pentesting #EthicalHacking #InfoSec
Hacking Articles retweeted
Active Directory Pentest Mindmap: Complete Attack Path 🧠
🔥 Telegram: t.me/hackinarticles
✴ Twitter: xitter.cf/hackinarticles
The AD Pentest Mindmap is a visual roadmap that helps attackers and defenders understand the full attack lifecycle—from enumeration to domain dominance—in a structured way.
⚡ Key Features of AD Pentest Mindmap
🔍 Visual breakdown of attack methodology
🧩 Covers tools, techniques & attack paths
⚙️ Organized in hierarchical tree structure
🛡️ Easy navigation for learners & professionals
📡 Simplifies complex AD attack chains
🎯 Covered Attack Areas
💥 Enumeration (Users, Groups, Shares)
🧪 Credential Attacks & Lateral Movement
🧬 Privilege Escalation Techniques
🌐 Persistence & Post Exploitation
⚡ Domain Dominance strategies
📖 Resource: github.com/Ignitetechnologie…
#ActiveDirectory #RedTeam #Pentesting #CyberSecurity #EthicalHacking #OSCP #InfoSec
Hacking Articles retweeted
Wireless Pentest Tools 📡🔥
🔥 Telegram: t.me/hackinarticles
✴ Twitter: xitter.cf/hackinarticles
Wireless pentesting focuses on analyzing WiFi networks, identifying weak security configurations, and testing defenses against real-world wireless attacks. These tools help security professionals audit and secure wireless environments effectively.
📚 Tools Covered
📡 Aircrack-ng
📶 Airodump-ng
⚡ Aireplay-ng
🛠️ Airbase-ng
🔐 Wifite
📂 Reaver
🚀 Bully
📡 Kismet
🔎 Wash
💻 Fern Wifi Cracker
📡 Fluxion
🧠 Mindmap:
github.com/Ignitetechnologie…
#CyberSecurity #WirelessPentest #EthicalHacking #WiFiHacking #Infosec
Hacking Articles retweeted
OSEP Exam Practice Training (Online) – Registration Open! 🚀
Ready to level up your offensive security skills and prepare for advanced red team operations?
Join Ignite Technologies’ Exclusive “Capture The Flag” (CTF) Based OSEP Practice Program and train in a real-world, attack-driven environment designed for serious cybersecurity professionals.
🔗 Register Now:
forms.gle/bowpX9TGEs41GDG99
💬 WhatsApp:
wa.me/message/HIOPPNENLOX6F1
📧 Email:
[email protected]
📚 Training Modules Include:
🚀 Introduction
🔍 Advanced Information Gathering
🎯 Initial Access & Client-Side Attacks
🛡️ Bypassing Security Controls
🪟 Windows Privilege Escalation
🐧 Linux Privilege Escalation
🧭 Active Directory Enumeration
🔁 Lateral Movement
🏰 Active Directory Attacks
🌐 Web Application Attacks
🕳️ Tunneling & Pivoting
🧬 Post-Exploitation & Persistence
🥷 Defense Evasion & OPSEC
🧪 Custom Malware & Tool Development
💥 Advanced Exploitation
📝 Reporting & Documentation
This program is ideal for professionals preparing for advanced offensive security certifications and those aiming to strengthen their red teaming capabilities.
Seats are limited. Secure yours today. 🚀
#CyberSecurity #InfoSec #EthicalHacking #RedTeam #PenetrationTesting #CloudSecurity #OSCP #OSEP #ActiveDirectory #SecurityTraining #CyberSecurityTraining
Hacking Articles retweeted
Onelogon: Taking over Active Directory Accounts via Netlogon🔑
We analyzed Netlogon, bypassed the Zerologon patch, resulting in a full auth bypass. An attacker can leverage this to compromise computer accounts, or even the entire AD. Non-standard config must be present tho 🧵




























