jacobh.io

Default Credentials

Initializing search

Jacob-Ham/jacobhio

$ whoami
Setup
Active Directory
Cloud
Methodologies
Web Application
Writeups

jacobh.io

Jacob-Ham/jacobhio

$ whoami
Setup
Active Directory
Active Directory
- Under Construction
- 1. Reconnaissance & Enumeration
  1. Reconnaissance & Enumeration
- 2. Initial Compromise
  2. Initial Compromise
- 3. Credential Theft
  3. Credential Theft
- 4. Lateral Movement
  4. Lateral Movement
- 5. Privilege Escalation
  5. Privilege Escalation
  - Domain
    Domain
    
    DCShadow
    
    DCSync
    
    Diamond Ticket
    
    Golden Ticket
    
    NoPac (SamAccountName Spoofing)
    
    Silver Ticket
    
    ADCS
    ADCS
    
    ESC1
    
    Enumerate ADCS
    
    SCCM
    SCCM
    
    Enumerate SCCM
    
    SCCM Site Takeover I
    
    SCCM Site Takeover II
  - Local
    Local
    
    Local Administrator Password Solution
    
    Token Privileges
    
    UAC Bypasses
    
    Unquoted Service Path
    
    Weak Service Binary Permissions
    
    Weak Service Permissions
- 6. Defense Evasion
  6. Defense Evasion
  - Powershell Downgrade
- Miscellaneous
  Miscellaneous
Cloud
Cloud
- Amazon Web Services (AWS)
  Amazon Web Services (AWS)
Methodologies
Methodologies
- ✅ Checklists
  ✅ Checklists
- 😏 Cheatsheets
  😏 Cheatsheets
  - Compiling Binaries
  - Default Credentials
  - Misc
  - Network Recon
  - Passive Network Recon
  - PowerView
  - SQLMap
  - WebApp
  - DaForce
    DaForce
    
    Salesforce 1
    
    Salesforce 2
    
    Salesforce 3
    
    Salesforce 4
  - Linux Privilege Escalation
    Linux Privilege Escalation
    
    ACLs
    
    Capabilities
    
    Credential Hunting
    
    Environment Hunting
    
    General Information
    
    Groups
    
    Low Level Exploits
    
    NFS, Samba, Network Shares
    
    Permissions
    
    Restricted Shells
    
    Service Based Escalation
    
    Shared Libraries & Interpreter Hijacking
    
    Writable Directories
  - Wifi
    Wifi
    
    Attacking
    
    Bypassing MAC Filtering
    
    Cracking Passphrases
    
    Decrypting Captures
    
    Driver Installation Alfa A1US036ACS
    
    Finding Hidden Networks
    
    Interface Modes
    
    Monitor Mode
    
    Reconnaissance
Web Application
Web Application
- Under Construction
- Insecure File Uploads
- Verb Tampering
- Web Application Firewall
- API
  API
- Access Control
  Access Control
- Authentication
  Authentication
- Discovery
  Discovery
- File Inclusion
  File Inclusion
- Injections
  Injections
- Request Forgery
  Request Forgery
  - Cross Site Request Forgery (CSRF)
  - Server Side Request Forgery
Writeups
Writeups
- Index
- HackTheBox
  HackTheBox
  - OverCertified

Default Credentials

CLI tool with default creds database:

pip3 install defaultcreds-cheat-sheet --break-system-packages

creds search tomcat

Made with Material for MkDocs