Lab of a Penetration Tester

Home of Nikhil "SamratAshok" Mittal

Pages

▼

Tuesday, April 9, 2013

Poshing the hashes: Using PowerShell to play with hashes

UPDATE: As mentioned here , even after KB2871997, you could still 'Posh' the SID-500-Administrator's hashes. What do Pen Tes...

Wednesday, February 13, 2013

Nishang 0.2.5 Released: Get WLAN keys in plain, Remove update and bug fixes.

This is a short & quick post about Nishang 0.2.5. Two new payloads which are borrowed from other sources (and went unnoticed for months...

Sunday, January 20, 2013

Introducing Prasadhak: Check running processes for known malwares using PowerShell

Once during a pen test, I got a complete acess to a box. It was a Windows 2008 server in a really bad shape. So bad that I wanted to check i...

Monday, January 14, 2013

(Quick Post) Check if your payload is running inside a VM using PowerShell

I was trying to improve some existing payloads of Nishang and Kautilya. One idea was to enumerate the environment in which the payloads wou...

Friday, December 7, 2012

Command Execution on MS SQL Server using PowerShell

One of my favorite "vulnerabilities" during Pen Tests is easy/guessable password for "sa" on MS SQL server with mixed a...

View web version

About Me

Nikhil SamratAshok Mittal: I am a hacker, information security researcher and enthusiast. On this blog, I write about my projects, experiments and presentations.

View my complete profile

Powered by Blogger.