Blog

Introduction #

In this blog post, I discuss a common network attack called Link-Local Multicast Name Resolution (LLMNR) poisoning. This type of attack can be highly effective in capturing NTLMv2 hashes, which can then be used to gain unauthorized access to systems in a Windows environment. I will also share insights on how to mitigate this this type of vulnerability attack, ensuring your network remains secure. To illustrate this attack, I have included screenshots from my recent lab demonstration where I successfully captured NTLMv2 hashes using Responder.

Room Link: https://app.hackthebox.com/starting-point?tier=0

Task 1 #

What does the 3-letter acronym SMB stand for?

Server Message Block

Task 2 #

What port does SMB use to operate at?

Walkthrough of the Insecure Direct Object Reference (IDOR) room on TryHackMe, part of the Jr. Web Penetration Tester learning path.

🧭 Access the TryHackMe IDOR Room — Complete this room to practice real-world exploitation of Insecure Direct Object References in a safe lab environment.

Deploy & hack into a Windows machine, exploiting a very poorly secured media server.

Room Link: https://tryhackme.com/r/room/ice

Task 1 - Connect #

Get connected to the TryHackMe network using OpenVPN. Make sure to first download your configuration file from your access page.

Step 1: Update Your System

2. Install Remmina

sudo apt install remmina

3. Launch Remmina

Step 4: Configure a Remote Connection