top of page


Boiler-CTF Walkthrough
So as usual, we will start with the OG, Nmap Scan. Command: nmap -A -p- -T5 <Target IP> As we can see FTP port is open, so we will login...
Strider Gearhead
Jun 22, 20241 min read
Â
Â
Â


Wgel CTF: Walkthrough
This is a very easy machine, in which we have to get into the machine through SSH and then we have to escalate our privileges to get the...
Strider Gearhead
Sep 9, 20231 min read
Â
Â
Â


Steel Mountain Walkthrough
INTRODUCTION: So this Room called Steel Mountain is based on a series named as Mr. Robot, The very First question in this Introduction...
Strider Gearhead
Sep 3, 20231 min read
Â
Â
Â


Post Exploitation: Active Directory
File Transfer Certutil certutil.exe -urlcache -f http://10.10.10.10/file.txt file.txt HTTP python -m SimpleHTTPServer 80 Browser Navigate...
Strider Gearhead
Jul 20, 20231 min read
Â
Â
Â


AD ATTACKS WITH MIMIKATZ
OVERVIEW What is Mimikatz? Tool used to view and steal credentials, generate Kerberos tickets, and leverage attacks Dumps credentials...
Strider Gearhead
Jul 19, 20231 min read
Â
Â
Â


GPP Attacks: AD Post Compromise Attack
Overview Group Policy Preferences allowed admins to create policies using embedded credentials. These credentials were encrypted and...
Strider Gearhead
Jul 17, 20231 min read
Â
Â
Â


Token Impersonation: AD Post Compromise Attack
Overview What are tokens? Temporary keys that allow you access to a system/network without having provide credentials each time you...
Strider Gearhead
Jul 16, 20231 min read
Â
Â
Â


Domain Enumeration using BloodHound
Bloodhound Overview Bloodhound is a tool which is used to download the data essentially of Active directory and it will visualize the...
Strider Gearhead
Jul 15, 20231 min read
Â
Â
Â


IPv6 Attack: An AD Attack
Overview If both the IPv4 and IPv6 is turned on and if you are utilizing IPv4 then who’s doing DNS for IPv6, the simple answer is usually...
Strider Gearhead
Jul 14, 20231 min read
Â
Â
Â


SMB Relay: An AD Attack
What is SMB Relay? Instead of cracking the hashes gathered with Responder, we can instead relay those hashes to specific machines and...
Strider Gearhead
Jul 12, 20231 min read
Â
Â
Â


LLMNR Poisoning: An AD Attack
What is LLMNR? LLMNR Stands for Link Local Multicast Name Resolution. Used to identify host when DNS fails to do so. Previously known as...
Strider Gearhead
Jul 12, 20231 min read
Â
Â
Â


Domain Enumeration with Powerview
Powerview is powerful tool which is used for enumeration of the domain. So to use this tool, firstly we will download this tool in our...
Strider Gearhead
Jul 10, 20231 min read
Â
Â
Â


Kerberoasting : An AD Attack
OVERVIEW: The diagram which is given below shows how Kerberos works. Now as we can see in the diagram, the user will: Kerberoas Working...
Strider Gearhead
Jul 9, 20231 min read
Â
Â
Â


Vulnversity Walkthrough
This machine is available on tryhackme and this machine is based on linux. So our first step is to run an nmap scan on the target...
Strider Gearhead
Mar 2, 20231 min read
Â
Â
Â


MR. Robot Walkthrough
MR. Robot is a vulnerable machine which is available on tryhackme and it is based on a linux machine and it this machine is inspired by...
Strider Gearhead
Feb 27, 20231 min read
Â
Â
Â


Black Pearl Walkthrough
BLACK PEARL IS A LINUX BASED VULNERABLE MACHINE. So as usual our first step is to run the Nmap scan. Command: nmap -T5 -p- -A <target...
Strider Gearhead
Feb 23, 20231 min read
Â
Â
Â


Butler Walkthrough
Butler is a windows based machine. Link to download the machine for VMware: https://drive.google.com/file/d/199WRUNVP5QAl88fvq74hI_z4P3CT...
Strider Gearhead
Feb 22, 20232 min read
Â
Â
Â


Kali Linux
Kali Linux is an operating system that is used by penetration testers. Kali Linux is specially used by hackers because it is a free...
Strider Gearhead
Feb 21, 20232 min read
Â
Â
Â


Bounty Hacker Walkthrough
Bounty hacker is vulnerable machine available on tryhackme website, in which we have to exploit different vulnerabilities to get into...
Strider Gearhead
Feb 20, 20232 min read
Â
Â
Â


DEV WALKTHROUGH
This machine is named as DEV Link: https://drive.google.com/file/d/1jg1vr9vo6ODc69f-3fSJguJwv3pU21m0/view?usp=share_link Firstly we will...
Strider Gearhead
Feb 19, 20233 min read
Â
Â
Â
bottom of page