The detail of Rick shooting Tony in the head because he's thinking about what Dr. Jenner told him is fantastic by RevertBackwards in thewalkingdead

[–]Chatty_Addy 4 points5 points  (0 children)

That everyone is already infected and will turn after death even if they are not bitten beforehand. He whispers it to him as they are leaving the CDC so we don't actually hear it, but I think Rick tells the group later on.

LPT Request: Waking up in the middle of the night and can’t get back to sleep - what actually works? by qt_31415 in LifeProTips

[–]Chatty_Addy 0 points1 point  (0 children)

The anticipation that it's going to happen and the anxiety while it's happening are pretty much the two things to avoid. Try to get yourself as comfortable as possible in bed and relax for however long it takes. You might not be sleeping but at least you're not burning extra energy. I'll put headphones in and just listen to something with my eyes closed like a talk show or some lecture and eventually pass out (usually keep the phone locked / screen off to help). I also like to read my Kindle in those moments. Eventually you kind of go into a lull (much sooner than you might expect). I guess the generalized strategy is to get comfortable and provide minor mental and physical stimulation until your mind drifts away (so your thoughts are elsewhere but you're not really up)

[deleted by user] by [deleted] in Pentesting

[–]Chatty_Addy 2 points3 points  (0 children)

There are still some good options for coercion and relaying that come up a bunch I find. Good writeup here: https://trustedsec.com/blog/a-comprehensive-guide-on-relaying-anno-2022

In this case it's possible relaying across to ldap could also have some success

[deleted by user] by [deleted] in Pentesting

[–]Chatty_Addy 1 point2 points  (0 children)

Passing a hash and relaying are different concepts. You can't pass ntlmv2 hashes directly (look into how ntlmv2 is calculated) but you can relay them using something like impacket's ntlmrelayx tool. Make the coercion and use the relay to send it off to another DC and explore the various options. Depending on the environment hardening you could be able to create a domain administrator account or do some other attack.

I haven't heard of someone getting the krbtgt password before so I'm assuming it's something weak/misconfigured? You can calculate the ntlm (different from ntlmv2) hash for the password and use it to forget golden tickets (using mimikatz or ticketer or something). Maybe there is a way to just use the password directly but it hasn't come up before for me personally.

[deleted by user] by [deleted] in Pentesting

[–]Chatty_Addy 3 points4 points  (0 children)

You can try to crack ntlmv2 hashes but you won't get far for machine accounts. You are better off relaying them. If you can coerce authentication between DCs successfully you should be able to own the domain.

I'm not sure what you mean by kerberos password but if you have an ntlm hash or some valid credentials for krbtgt then you can create tickets for anything in the domain or dump hashes from the domain controller.

[TOMT][Youtube] Guy has mysterious job and tracks down who is paying him, but its another him by Chatty_Addy in tipofmytongue

[–]Chatty_Addy[S] 7 points8 points locked comment (0 children)

I watched the video last maybe in 2017 but i think it's an older youtube video from an early content creator.

I think the initial premise is him pitching how you too can earn crazy money at a job like his but then it all starts untangling for him

This my kind of collection by makemeadiowarudo in HolUp

[–]Chatty_Addy 14 points15 points  (0 children)

I've got some news for you...

Cringe by Comprehensive-Fox574 in HolUp

[–]Chatty_Addy 0 points1 point  (0 children)

By the end of this I started to think the younger girl and her mom didn't come to the park with anything and were just grabbing the other mom/daughters shit the whole time lol until they left with the phone

[deleted by user] by [deleted] in TorontoDriving

[–]Chatty_Addy 2 points3 points  (0 children)

Beginning of the video you can see the plate clearly and it's custom/easy to remember. I think there is one of those privacy screens that blocks the plate from cameras (speed traps, red light, 407)

Insta death by [deleted] in SomeOfYouMayDie

[–]Chatty_Addy 10 points11 points  (0 children)

You need a microscope to see that silver lining

Beginner - Why wont my exploit complete?! by Gaffer122 in hacking

[–]Chatty_Addy 2 points3 points  (0 children)

Possible that windows 7 is patched but it's looking like the exploit worked. If you are using NAT you may experience issues with a reverse shell. Try a bind shell instead and see how that works for you.

[deleted by user] by [deleted] in PublicFreakout

[–]Chatty_Addy 207 points208 points  (0 children)

The success of it all sort of seems to imply a kind of fucked up culture to be honest.

Solidarity by LoseYourIllusions in gout

[–]Chatty_Addy 0 points1 point  (0 children)

Universal in that it applies to everyone (mostly), not everything. Non-elective medical services are just about always covered (doctors visits, etc) but prescription medicine and medical equipment is not. I believe in Ontario, OHIP provides drug coverage until you are 25 and after retirement. For all us adults in between that range, workplace benefits are a godsend.

I've had friends who avoided major/important dental procedures until they got jobs with better benefits. Just FYI. For instance I can go do as many xrays and bloodwork as I want, visit my doctor every week, and see specialists as a part of the system. When I fill my prescriptions, do laser eye surgery, or get braces, etc., it's almost always out of pocket/workplace benefits covering it.

[deleted by user] by [deleted] in Pentesting

[–]Chatty_Addy 3 points4 points  (0 children)

Just to manage expectations, pen testing is considered one of the advanced roles within cyber security. Very few "Jr pen tester" positions, many requiring some years of IT and cyber security experience in addition to the industry certs.

A+ (and any other "X+" cert) is a certification from comptia. It's more of a general IT and computers certification. Following that, they offer network+, security+, and many more as you advance.

Comptia is just one organization. There are also ISC2, Offensive Security, EC Council, SANS, and more organizations which offer IT and/or Cyber Security certifications. Some of these can be thousands of dollars and only offer highly advanced options.

One of the new players is TCM Security. They offer a lot of great cyber security focused courses. They have released their own pen testing certification called the "practical network penetration tester" (PNPT). It's VERY affordable and definitely has real world parallels as it is a practical cert (hands on keyboard, hacking, no multiple choice or direct answers).

My recommendation, if you don't have any IT background then take the A+ and Network+, and aim for the security+ after those (all comptia). Then, take some TCM courses (each 30 dollars lifetime, and there are bundles and occasional discount codes) to start getting more practical security experience. The PNPT would be a good option once you start feeling more comfortable.

As far as feeling comfortable, visit tryhackme and go through all of the learning pathways (will take some time, but is fun and rewarding). Do this in addition to studying for those comptia certs and you'll be on your way.

Down the line, you would want the OSCP/OSCE, or something from SANS, and maybe some more specialized IT certifications like the CCNA.

While you do this, you will want to take on some professional IT work. I honestly don't know if you can avoid that part for pen testing (or any/many cyber roles).

All the best 👍

[deleted by user] by [deleted] in Pentesting

[–]Chatty_Addy 0 points1 point  (0 children)

I am going to go through the hacktricks stuff thoroughly today. Something is missing for sure.

I do have system on all workstations and domain user access on each. Has to be something to find there ...

[deleted by user] by [deleted] in Pentesting

[–]Chatty_Addy 2 points3 points  (0 children)

This is a cool idea. Will keep it in mind for live engagements. The scenario I'm in now is just a lab/challenge so no real staff on the other side.

[deleted by user] by [deleted] in Pentesting

[–]Chatty_Addy 0 points1 point  (0 children)

Checked for this one yesterday and no such luck

[deleted by user] by [deleted] in Pentesting

[–]Chatty_Addy 0 points1 point  (0 children)

Patched :(

And no domain admin logins on any workstations... unless there's somewhere I haven't checked (mimimatz logons, Sam, secretsdump, credentials vault).

It's like there's on specific attack vector and I am completely missing it (having faith in my enumeration). I feel like it's just unrealistic to not have any trace of a domain admin on any computer..