Ethical Hacking on Notes by Nisha

IPv6 DNS Takeover with MITM6 in an Active Directory Environment

Mon, 22 Jul 2024 00:00:00 +0000

Table of Contents #

Introduction
Understanding IPv6 DNS Takeover
Mitigation Strategies
Demonstration Steps
Conclusion

Introduction #

In this blog post, I will walk you through a demonstration of an IPv6 DNS takeover attack using the mitm6 (Man in the Middle for IPv6) tool in an Active Directory (AD) pentesting environment. This type of attack exploits weaknesses in the network’s handling of IPv6, allowing an attacker to become a Man-in-the-Middle (MITM) and relay NTLM authentication requests to a Domain Controller (DC).

Understanding SMB Relay Attacks and Mitigation Techniques

Mon, 22 Jul 2024 00:00:00 +0000

Introduction #

In the world of network security, understanding various attack vectors is critical to safeguarding systems and data. One such attack is the SMB (Server Message Block) Relay attack, which exploits vulnerabilities in the SMB protocol commonly used in Windows environments. This article will explore what an SMB Relay attack is, the steps involved in executing such an attack, and mitigation strategies to reduce the associated risks. Additionally, I will include screenshots and steps from my lab demonstration using the Responder tool and NTLM Relay X.

Understanding SMB Relay Attacks and Mitigation Techniques

Mon, 22 Jul 2024 00:00:00 +0000

Understanding LLMNR Poisoning and Mitigation Techniques

Sun, 21 Jul 2024 00:00:00 +0000

Introduction #

In this blog post, I discuss a common network attack called Link-Local Multicast Name Resolution (LLMNR) poisoning. This type of attack can be highly effective in capturing NTLMv2 hashes, which can then be used to gain unauthorized access to systems in a Windows environment. I will also share insights on how to mitigate this this type of vulnerability attack, ensuring your network remains secure. To illustrate this attack, I have included screenshots from my recent lab demonstration where I successfully captured NTLMv2 hashes using Responder.

My Journey to eJPT Certification: Insights and Tips for Success

Mon, 15 Jul 2024 00:00:00 +0000

Earning the INE Security Junior Penetration Tester (eJPT) certification has been a significant milestone in my cybersecurity journey. In this blog post, I’ll share my experience with the eJPT exam and the strategies that helped me succeed. Whether you’re considering this certification or preparing for the exam, I hope my insights will be useful for your own path in ethical hacking and penetration testing.

Dancing - HTB Walkthrough by Nisha

Fri, 05 Jul 2024 00:00:00 +0000

Room Link: https://app.hackthebox.com/starting-point?tier=0

Task 1 #

What does the 3-letter acronym SMB stand for?

Server Message Block

Task 2 #

What port does SMB use to operate at?

TryHackMe Ice - Walkthrough by Nisha

Tue, 04 Jun 2024 00:00:00 +0000

Deploy & hack into a Windows machine, exploiting a very poorly secured media server.

Room Link: https://tryhackme.com/r/room/ice

Task 1 - Connect #

Get connected to the TryHackMe network using OpenVPN. Make sure to first download your configuration file from your access page.

Exploiting EternalBlue (MS17-010): A Walkthrough and Protection Measures

Mon, 18 Mar 2024 00:00:00 +0000

A detailed walkthrough of how to exploit the Eternal Blue vulnerability on a Windows 7 Ultimate machine, covering both manual and automated methods.

TryHackMe Ignite Room Walkthrough: Exploiting Fuel CMS 1.4.1 RCE

Sun, 17 Mar 2024 00:00:00 +0000

Walkthrough of TryHackMe’s Ignite room where we exploit a Remote Code Execution vulnerability in Fuel CMS 1.4.1 (CVE-2018-16763). Learn the steps of enumeration, exploitation, privilege escalation, and defense strategies.

Content Discovery - THM Walkthrough by Nisha

Fri, 13 Oct 2023 00:00:00 +0000

Room Link: https://tryhackme.com/r/room/contentdiscovery

In cybersecurity, discovering hidden or non-obvious content on web servers is critical for any aspiring ethical hacker. The “Content Discovery” room on TryHackMe offers a detailed, hands-on approach to mastering techniques for uncovering various types of web content that can reveal vulnerabilities or sensitive data. Ideal for learners looking to deepen their web penetration testing skills, this room enhances the ability to pinpoint potential entry points on a target website.

Meow - HTB Walkthrough by Nisha

Thu, 28 Sep 2023 00:00:00 +0000

Room Link: https://app.hackthebox.com/starting-point?tier=0

Task 1 - #

Task 2 - #

Task 3 - #

Introduction to Offensive Security - THM Walkthrough by Nisha

Mon, 18 Sep 2023 00:00:00 +0000

Room Link: https://tryhackme.com/r/room/introtooffensivesecurity

Task 1 - What is Offensive Security? #

Question: Which of the following options better represents the process where you simulate a hacker’s actions to find vulnerabilities in a system?