sdushantha

Kerberos cheatsheet

Bruteforcing

With kerbrute.py:

python kerbrute.py -domain <domain_name> -users <users_file> -passwords <passwords_file> -outputfile <output_file>

With Rubeus version with brute module:

sdushantha

#!/usr/bin/python3
# 
# POC of RCE on Fuel CMS v1.4.1 (CVE-2018-16763)
#
# Original author: Padsala Trushal
# Modified by: Siddharth Dushantha
#
# Modifications that've been made:
#  - Cleaned output so that the word 'system' did not
#    appear in every output

sdushantha

#!/bin/bash
#
# Code used to fetch all of Wordle's words
#

# Save JavaScript code containing the list of words into wordle.js 
curl https://www.nytimes.com/games-assets/v2/wordle.b53d5fe794f17d174ac9.js > wordle.js

# Get the array containing the list of words and remove array specific characters
cat wordle.js| grep -oE 'va=\[[^]]*]' | sed -e "s/va=\[//g" -e "s/\"//g" -e "s/,/\n/g" -e "s/]//g" > wordle-full-list.txt

sdushantha

|Url |Contact |Expires |Encryption |Acknowledgments |Languages |Policy |Hiring | |------------------------------------------------------------|-----------------------------------------------|-------------------------------|-----------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------

sdushantha

import requests
import jwt
import argparse
import sys


def get_exernal_object_id(target, token):
    headers = {
        'Host': 'teams.microsoft.com',
        'Authorization': f"Bearer {token}",

sdushantha

hello

sdushantha

https://bugbounty.w3spaces.com/aa.html

sdushantha

nmcli con add \
  type wifi \
  con-name "eduroam"
  ifname "wlp4s0" \ # Your wifi interface
  ssid "eduroam" \
  wifi-sec.key-mgmt "wpa-eap" \
  802-1x.identity "<YOUR-STUDENT-ID>@lu.se" \ # May also use another university identification
  802-1x.password "<YOUR-PASSWORD" \
  802-1x.system-ca-certs "yes" \
  802-1x.domain-suffix-match "radius.lu.se" \

sdushantha

#!/usr/bin/env python3
#
# by Siddharth Dushantha (sdushantha)
#
# My very simple version of youtube-dl.
#
# Credits: https://git.io/JTPr9
#

import re

sdushantha

import requests
import sys

# Can be 'computer' or 'tablet'
deviceType = "computer"
serialNumber = input("Serial: ")
print()

data = {
'cat': 'computer',