227 Red Teaming tips, by @vysecurity. Here's a few 👇
1. Taking a snapshot of AD can let you browse, explore and formulate future attacks if access is lost momentarily.
2. You dont need payloads when you can phish credentials and login to Citrix, VPN, email with no 2FA. Check the perimeter.
3. Need a DC? echo %LOGONSERVER%. Need a list? nltest /dclist, nslookup -q=srv _kerberos._tcp (domain suffix can autocomplete)
4. Need to sweep for uptimes? Use wmic /node:"" OS get LastBootUpTime in a for loop
5. Check the entire list by @vysecurity below.
Do you have other tips? Comment 👇. Like, retweet, and follow me for more cyber stuff.
#pentesting #appsec #infosec #redteam #ethicalhacking #hacking #bugbounty #bugbountytips #cybersecurity
github.com/vysecurity/RedTips