Monday, June 29, 2020

[eCPPT][DNS]DNS Reconnaissance

DNS Dumpster (https://dnsdumpster.com/)
DNS Enumerate (#dnsenum --subfile /root/report.txt -v -f /usr/share/dnsenum/dns.txt -u a -r microsoft.com)

Saturday, June 27, 2020

[eCPPT]DNS Reverse Lookup Tool

https://hackertarget.com/reverse-dns-lookup/

https://dnslytics.com/reverse-ip

https://reverseip.domaintools.com/

https://www.robtex.com/

[eCPPT][DNS]The dig command in Linux

General Lookup:
#dig TARGET +short
Example:
#dig microsoft.com +short

PTR Lookup:
#dig TARGET PTR
Example:
#dig microsoft PTR

MX Lookup:
#dig TARGET MX
Example:
#dig microsoft.com MX

NS Lookup:
#dig TARGET NS
Example:
#dig microsoft.com NS

Zone Transfer:
#dig @SERVER TARGET -t AXFR +nocookie
Example:
#dig @10.50.96.5 foocampus.com -t AXFR +nocookie

Wednesday, June 24, 2020

[eCPPT][Pentest][Threat Intelligence]Search Engines for reconnaissance

Gov-related:
SAM Database (www.sam.gov)

Job Posting:
LinkedIn (www.linkedin.com)
Indeed (www.indeed.com)
Monster (www.monster.com)
CareerBuilder (www.careerbuilder.com)
Glassdoor (www.glassdoor.com)
Simplyhired (www.simplyhired.com)
Dice (www.dice.com)

Finance Section:
CrunchBase (www.crunchbase.com)
Inc. (www.inc.com)
Google Finance (finance.google.com)
EDGAR (www.sec.gov/edgar.shtml)
Yahoo Finance (finance.yahoo.com)

File-related:
Download document files from the respondent before using FOCA to analyze them.

Harvester:
#theHarvester -d microsoft.com -s -v -e 8.8.4.4 -n -c -b all

Archive:
WayBackMachine (archive.org)

Sunday, June 14, 2020

[eCPPT]Change Windows password through Kali Live CD

1) Import SAM by the chntpw command:
#chntpw -i /media/XXXX/WINDOWS/system32/config/SAM

2) Use the popup interactive user interface to change the password.