mimikatz VS TryHackMe

mimikatz Reviews

TryHackMe Reviews

mimikatz mentions (14)

• Compromising Plaintext Passwords in Active Directory

  Typically, Mimikatz is used to extract NTLM password hashes or Kerberos tickets from memory. However, one of its lesser-known capabilities is the ability to extract plaintext passwords from dumps created for the LSASS process. This means that an attacker can compromise plaintext passwords without running any nefarious code on domain controllers. Dump files can be created interactively or using ProcDump , and in... Source: over 1 year ago

• How to Detect Pass-the-Ticket Attacks

  Mimikatz can be used to perform pass-the-ticket, but in this post, we wanted to show how to execute the attack using another tool, Rubeus , lets you perform Kerberos based attacks. Rubeus is a C# toolset written by harmj0y and is based on the Kekeo project by Benjamin Delpy, the author of Mimikatz . Source: over 1 year ago

• What is DCShadow Attack and How to Defend Against It

  What is DCShadow? DCShadow is a command in the Mimikatz tool that enables an adversary to register a rogue domain controller and replicate malicious changes across the domain. Source: over 1 year ago

• Stealing User Passwords with Mimikatz DCSync

  Mimikatz provides a variety of ways to extract and manipulate credentials, but one of the most alarming is the DCSync command. Using this command, an adversary can simulate the behavior of a domain controller and ask other domain controllers to replicate information — including user password data. In fact, attackers can get any account’s NTLM password hash or even its plaintext password, including the password... Source: over 1 year ago

• Domain Compromise with a Golden Ticket Attack

  Using Mimikatz , it is possible to leverage the password of the KRBTGT account to create forged Kerberos Ticket Granting Tickets (TGTs) which can be used to request Ticket Granting Server (TGS) tickets for any service on any computer in the domain. Source: over 1 year ago

TryHackMe mentions (370)

• Ask HN: Good book to learn modern networking?

  It's more focused on security than just networking, and I don't believe it's quite what you're looking for, but https://tryhackme.com/ might be enjoyable. - Source: Hacker News / 4 months ago

• Beginner question

  HTB Academy is definetely more suitable than jumping straight into solving boxes as it explains the methodology behind solving boxes. Try Hack Me learning paths is similar to HTB Academy, so what you choose between them is a matter of personal taste. If you want something to study kind of long-termish the Penetration Tester Job Role Path might be of interest. Source: 5 months ago

• If you're looking for resources pertaining to hands-on practical demonstrations of learned skills and tools/techniques, look no further.

  Also there's a ton of different CTFs online which you retrieve flags from machines that are positioned behind specific sorts of security measures (or lack thereof) which serve to show your proficiency in implementing certain methods as well as testing your creative problem solving, including but not limited to: Hacker101 which can earn you invitations on HackerOne to private bounties not publicly listed,... Source: 6 months ago

• TryHackMe for Pentest+

  What do you think about the tryhackme.com Pentest+ module? Source: 7 months ago

• Hi I’m a new student applying to Wgu’s It Program for Cybersecurity with no credits being transferred and trying to complete in 6 months is there any tips that you guys can give me?

  When you get your WGU email, you can get a student subscription for Hack The Box, you can try out PicoCTF for free, and tryhackme.com is another resource. Source: 6 months ago