Penetration Testing – discussing exploits,  vulnerabilities, fixes and tools

Here I will be discussing exploits,  vulnerabilities, fixes and tools dedicated to the two areas of personal interest to me within Penetration Testing. Infrastructure and Web Application Testing.

Infrastructure Testing

• NTLM/NTLMv2 Relaying in Windows with PowerShell and Inveigh!
• Linux Privilege Escalation with Setuid and Nmap
• Creating and mangling custom word lists!
• Setting up a quick DHCP server in Linux with dnsmasq
• Pivoting through SSH with dynamic port forwarding.
• Adding your own or custom exploits to Metasploit! Eternalblue, SambaCry?
• Tunnel snmp-check and other UDP traffic over SSH
• Quick tip! Changing your MAC address in Windows, Linux and OSX is simple.
• Avoiding AV detection when running mimikatz with sed!
• The Shadow Brokers dump – Eternalblue, DoublePulsar – Hello SYSTEM!

Web Application Testing

• Burp Suite Macro: Auto Login (session re-authentication)
• Hardening Microsoft IIS 8.5 Security Headers
• MiTM Thick Client Web Services Testing.
• Server Hardening: HTTP TRACE TRACK Methods Allowed – Part1 Apache