Category: Python
-
SYSTEM to Domain Admin – Technique One
Today I am going to give a quick overview of one of my favorite ways to escalate from SYSTEM level privileges on a single host, to domain admin level and more on a Windows network. There are many ways and techniques to accomplish jumping from SYSTEM to domain admin, this just happens to be one…
Josh Berry
-
GoPhishing Update – Autocomplete and More
I’ve updated the gophish script discussed here and here. This update includes the following features and fixes: Fixed an issue where redirections would occur immediately upon access Added option to pass in your own log file as an argument Smart(er) redirects Autocomplete Support The original script did not expect the link being accessed by the…
-
Adventures in Penetration Testing: Let’s Go Phishing – Update
Please see the original article for more information about this phishing script. This is just a minor update to some functionality that I added over the weekend. I haven’t hooked BeEF in yet, but I have added Metasploit, which can be nice. The updated version, which can be found here, can be tied into Metasploit’s…
-
Adventures in Penetration Testing: Let’s Go Phishing
Phishing and social engineering engagements are often unique to each customer, however; I often find that a customer just wants one of their web pages, like their web email sign on page, copied. This link to this phishing site is then emailed out to the victims to determine their susceptibility in clicking on the link…
Josh Berry
CodeWatch 