Dumping Credentials – SAM File Hashes - Juggernaut-Sec

Dumping SAM file hashes from the registry, shadow copy, and directly on the terminal using LOLBins, PowerShell, Mimikatz, Meterpreter, and more.

Dumping Credentials – LSASS Process Hashes - Juggernaut-Sec

LSASS is a process in Microsoft Windows operating systems that is responsible for enforcing the security policy on the system... To dump the LSASS process we...

Want to learn how to hack? - Juggernaut Pentesting Academy

Welcome to Juggernaut-Sec, your one-stop destination for learning ethical hacking! Our blog is a great place to start, with free training and tips on...

AD Recon – NetBIOS (137/138/139) and SMB (445) Part-1

In this post we will look at some tools we can use to enumerate the NetBIOS and SMB services utilizing UDP ports 137 and 138 as well as TCP ports 139, and 445.

AD Recon – MSRPC Over SMB (135/139/445) - Juggernaut-Sec

In this post we will look at a few different tools that we can use to enumerate MSRPC over SMB utilizing UDP port 135, and TCP ports 135, 139, and 445.

AD Recon – MSRPC (135/539) - Juggernaut-sec

In this post, we will look at a few different tools such as rpcdump.py, rpcmap.py, and Metasploit to enumerate the MSRPC service running on TCP/UDP port 135.

AD Escalation – Kerberoasting Attacks - Juggernaut-Sec

Kerberoasting is a technique used by attackers, which allows them to request a service ticket for any service with a registered SPN. Once requested...

AD Recon – LLMNR Poisoning with Responder -

In this post we will go over the concept of LLMNR poisoning. To perform LLMNR poisoning, we will execute a MITM (man-in-the-middle) attack using Responder...

Fail2Ban – Linux Privilege Escalation - Juggernaut-Sec

In this post, we will explore how an attacker can escalate privileges from a standard user to root by exploiting the Fail2Ban service (version 0.11.2).

Linux File Transfers for Hackers - Juggernaut-Sec

In this post, we will go over various techniques that will allow us to perform file transfers from our attacker machine onto a victim Linux host and vice-versa

Dumping Credentials – LSASS Process Hashes - Juggernaut-Sec

LSASS is a process in Microsoft Windows operating systems that is responsible for enforcing the security policy on the system... To dump the LSASS process we...

Sudo Part-2 – Linux Privelege Escalation - Juggernaut-Sec

In Part-2 of sudo privilege escalation, we'll see abusing intended functionality, LD_PRELOAD, token reuse, and two CVE’s that target specific versions of sudo.

Sudo Part-1 – Linux Privilege Escalation - Juggernaut-Sec

For this post on Linux Privilege Escalation techniques, we will be deep-diving into the various ways to exploit the sudo binary / privilege.

Blog – Latest Posts - Juggernaut Pentesting Blog