Want a double identity? In this post we’ll be covering how to create a sock puppet to gain information on people on social media. Oftentimes we aren’t allowed to browse accounts without having one. Which is why it’s essential to build a sock puppet. We’ll do so using a few simple tools.
Want to create a separate identity? It all begins with an OSINT virtual machine that is completely separate from your real identity. With it, you can start your investigations into businesses, people and movements. We’ll be using the VM offered by TraceLabs and some other tweaks, such as a VPN.
Want to crack a service account password?
In this tutorial, we’ll see kerberoasting in action and how this simple attack can land us with the password hash of a service account. We’ll use Impacket and one of its simple modules “GetUserSPNs”, once we’ve gotten the password hash we’ll crack it.
Want to impersonate a Windows admin? In this post, we’ll look at a “Token Impersonation” attack, which will allow us to impersonate any logged-in user on a Windows machine.We’ll use Metasploit and its “Incognito” module. A few simple commands will give us an impersonation.
Want to pass compromised Windows credentials around?
In this guide we’ll take a look at “Pass the password/ Pass the Hash” attacks and how we can leverage a simple password to owning a domain. To do so we’ll use a tool called “crackmapexec” under Kali Linux.
Want to easily scan for vulnerabilities?
OpenVAS is a free, open-source vulnerability scanner and project manager. It’s easy to install, takes just a few commands on Kali Linux. In this post, I’ll guide you through the general functionalities of OpenVAS and how to perform your first scan.
