↓Skip to main content

Red Team

Understanding SMB Relay Attacks and Mitigation Techniques

·4 mins
Blog Cybersecurity Offensive Red Team Penetration Testing Ethical Hacking Active Directory SMB

Introduction #

In the world of network security, understanding various attack vectors is critical to safeguarding systems and data. One such attack is the SMB (Server Message Block) Relay attack, which exploits vulnerabilities in the SMB protocol commonly used in Windows environments. This article will explore what an SMB Relay attack is, the steps involved in executing such an attack, and mitigation strategies to reduce the associated risks. Additionally, I will include screenshots and steps from my lab demonstration using the Responder tool and NTLM Relay X.

Understanding LLMNR Poisoning and Mitigation Techniques

·4 mins
Blog Cybersecurity Offensive Red Team Penetration Testing Ethical Hacking Active Directory LLMNR

Introduction #

In this blog post, I discuss a common network attack called Link-Local Multicast Name Resolution (LLMNR) poisoning. This type of attack can be highly effective in capturing NTLMv2 hashes, which can then be used to gain unauthorized access to systems in a Windows environment. I will also share insights on how to mitigate this this type of vulnerability attack, ensuring your network remains secure. To illustrate this attack, I have included screenshots from my recent lab demonstration where I successfully captured NTLMv2 hashes using Responder.

Content Discovery - THM Walkthrough by Nisha

·5 mins
Blog TryHackMe Cybersecurity Offensive Red Team Penetration Testing Ethical Hacking Web Security

Room Link: https://tryhackme.com/r/room/contentdiscovery

In cybersecurity, discovering hidden or non-obvious content on web servers is critical for any aspiring ethical hacker. The “Content Discovery” room on TryHackMe offers a detailed, hands-on approach to mastering techniques for uncovering various types of web content that can reveal vulnerabilities or sensitive data. Ideal for learners looking to deepen their web penetration testing skills, this room enhances the ability to pinpoint potential entry points on a target website.

Walking An Application - THM Walkthrough by Nisha

·9 mins
Blog Cybersecurity Offensive Red Team Web App Tryhackme

Room Link: https://tryhackme.com/r/room/walkinganapplication

In the "Walking An Application" room on TryHackMe, you will learn how to manually assess a web application for security vulnerabilities using only the built-in tools available in your web browser. Automated security tools and scripts often miss many potential vulnerabilities and valuable information. This room emphasizes the importance of manual review to identify and understand these overlooked issues.