Discover and read the best of Twitter Threads about #webshell

Most recents (2)

Did you know that it is possible to elevate privileges with SeImpersonate in an ADCS environment? It is an alternative to *Potato that you can use in your Red Team operations. And you can do it all with Kraken! #redteam #webshell

You can read about this technique explained in… twitter.com/i/web/status/1… Image
First, you must obtain a delegation TGT, you can do it with Rubeus (previous image).

Then you convert the Ticket in KIRBI format to CCACHE. You can use ticketConverter from Impacket: Image
With the imported Ticket, you can request a certificate for the machine account using the "Machine" template. Then, you can use PKINIT authentication to get the NT Hash of the machine account. Use Certipy and keep it simple! Image
Read 4 tweets
Ciberseguridad México
En este hilo compartiremos todo lo relacionado en #ciberseguridad de #Mexico

#DataBreach #DataLeaks #Ciberseguridad #Sin_ciberseguridad #hailredbird Image
Venden en foro de internet acceso a una #WebShell en un servidor comprometido con acceso a bases de datos del de @INEMexico

- Base de Datos 2018
- Base de Datos 2019
- Base de Datos 2021 ImageImageImageImage
En 2019 se filtraron 2GB de datos de @censia_salud
- Algunos datos aun están disponibles en sitios como pastebin, ghostebin y anonfiles

#databreach #mexico #dataleak ImageImageImageImage
Read 29 tweets

Related hashtags

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3.00/month or $30.00/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!