RustBelt RedTeam Forge
NTLM Reflection
Initializing search
    • Home
    • Markdown cheat sheet
      • Focus to do list
      • Getting Your First Cybersecurity Job (From a Non Hiring Manager Perspective)
      • J's suggestion
      • TrshPuppy Suggestion
      • AI hacking resources
      • Ralph Loop Primer
      • Ralph loop
      • Free models
      • Resources
      • John Hammond Active Directory YT
      • Microsoft Active Directory Federation Server Set up
        • Wolf's AD lab
        • a. Introduction and Definitions
        • b. Creating an Organizational Unit and Users in Active Directory
        • c. Setting a Domain Level policy in Active Directory
        • Setting an Organizational Level Policy in Active Directory
        • Domain Controllers
        • Active Directory / Domain Services (AD DS) Data Store
        • The Forest
        • Users and Groups
        • Trust and Policies
        • Domain Services Overview
        • 7. Active Directory in the cloud
      • Volatility
      • Wireshark
      • LinPeas to target machine
      • Playbook
      • Pwn.college
      • Reverse shell bash upgrade
      • Ctf list
      • Stderr dk challenges
        • CISA
        • Login
        • Challange 1
        • Challenge 2 Promotion
        • Intern Level 1
        • Intern Level 2
        • Intern Level 3
        • Main
        • HTB —
        • AGENTS.md — HTB Pentest Education Coach (Notes + Attack Workflow)
        • TMUX whitespace remover
        • Template
          • Active
          • Appointment
          • Cicada
          • Clicker
          • HTB — Escape
          • Escape
          • EscapeTwo - Work Log
          • Flight
          • Forest
          • Monteverde
          • Return
          • [[HTB]]: Sauna – Write-up
          • Support
          • Timelapse
          • Timelapse htb
          • Administrator (HTB) - Step-by-step notes
          • HTB — Blackfield
          • Blackfield
          • Attack Chain - theFrizz
          • theFrizz - HTB Writeup
            • Credentials - theFrizz
                    • LICENSE
                      • ICON LICENSE
        • Factory Reset
        • Pros
        • NahamCon2022 CTF
        • Main
        • Food
        • Jurassic Park
        • nmap scans
        • OpenVPN
        • Panda
        • Poster
        • Rootme
        • Shrek
        • Wonderland
        • Year of the Fox
        • Venus
        • Speed Run time - 2 hr to level 23
        • Natas
        • Core Concepts
          • APIPA Automatic Private IP addresses
          • Classes
          • IPv4 decimal to Binary
          • DNS Domain naming Services
          • NAS Network Attached Storage
          • Remote Access
          • Tunneling and IPSec
          • Creed's Notes
          • OSI TCP IP Model
          • Presentation Layer
          • TCP IP
          • Main
            • Application Layer Layer 7
            • Protocols
            • Troubleshooting
            • Data Link Layer 2
            • Troubleshooting
            • Network layer Layer 3
            • Protocols
            • TroubleShooting
            • Physical Layer Layer 1
            • Troubleshooting
            • Protocols of TCP ip
            • Main
            • Protocols
            • Transport layer Layer 4
            • Protocols
            • Troubleshooting
        • 1.3 What is Cybersecurity
          • 1.1 Introduction to the OSI Model
          • 1.2 Networking Topologies and Characteristics
          • 1.3 Internet Protocol Addressing Solutions
          • 1 Learning Objectives
            • Chapter 1 Agenda
            • Risk Management and Security Basics
            • M2 Threats, Attacks and Vulnerabilities
            • M3 Cryptography
            • M4 Networking Basics
            • M5 Network Connectivity Devices
            • M6 Operational Security
            • M7 Identity and Access Management
          • 1.1 1 OSI model
          • 1.1 2 Data Communication
        • CozyHosting
        • Keeper
        • Knife
        • Lame
        • Nibbles
        • OSCP CheckMethodology
        • Pilgrimage
        • Poison
        • Precious
        • SolidState
        • Sunday
          • Lain Kusanagi OSCP like machines
        • Encryption
        • Security + flash cards
        • Attack surface.excalidraw
        • Links
              • Testing Hashes
      • Setup
      • Wolf's Cisco Modeling Lab Workbench
      • 1.1 Applications
      • Shares Linux
      • Coredns
      • Install
      • Tutorials
      • Apache
      • Commands
      • 2 Main concerns in email analysis
      • Tools
      • Identifiers
      • Identifier
      • Enterprise CyberSecurity Basics
          • Change shape of selected elements
          • Darken background color
      • OPNsense
      • Game development
      • Minecraft
      • Git workflow
      • Repo life cycle
      • Tutorials
      • Fix apt update errors
      • Hacking scenarios
      • Updating your machine
      • Bash Bunny
      • C2 Cloud
      • O.MG Syntax
      • Payloads
      • Pineapple
      • Current Desktop
      • 318144411987083274
      • Open history view
      • 1 Preparation
      • Best Practices and Procedures
      • Utilities & Applications
      • Encapsulating
      • OSI model overview
      • OSI workshop
      • TCP IP model
      • Port forwarding
        • Dig
        • WHOIS
        • Ping
        • Traceroute
        • Cisco switch commands
        • ITN 9.1.3
        • ITN 9.2.9
      • Example
      • cast identifiers MAC addresses
      • Useful commands
      • Kubernetes
      • Bash Cheat Sheet
        • Python Resources
        • Python Cheat Sheet
      • App download and make world run able
      • Customized linux
      • Directory permissions
      • Disk Management
      • Ghostty
      • Resetting password on Ubuntu VM with lvm
      • Shells
      • Tutorials
      • Ubuntu Server 2022
      • Commands
      • Ed
      • Haxnet permissions
      • Session Control (from the command line)
      • Vi
        • Gentoo
        • Tegora Kustom Kali
        • XeroLinux
        • Zines
        • rwxrobs Ubuntu server customized
        • $PATH
        • Automation
        • BASH
        • Common directories
        • Kali
        • Linux commands
        • Logs
        • Package Management eh
        • Permissions
        • Processes
        • Regex
        • Shell Operators
        • Text Editors
        • Utilities
        • Find
        • Main
        • Kali autopilot
      • Telnet 3270
      • OSI model Data encapsulation decapsulation
      • Cat.excalidraw
      • Fortnite
      • Pinky
      • GitHub Dorks
      • OSINT Thingy an OSINT tool
      • Chmod utils
      • 📋Master Port Enumeration Cheat Sheet
      • Engagement outline
      • Enumeration
      • Methodology
      • Physical Penetration Testing
      • Stabilize Shell BASH
      • Stabilize shell Python
      • Wi Fi hacking
      • Exfil data
        • PowerShell AD Enumeration — Mental Model & Cheat Sheet
        • [[Bloodhound]]
        • Websites
        • Attack vectors
        • Brute Forcing Passwords
        • Remote Access services
        • Cross site Scriping XSS
        • Google Dorking
        • HTTP methods
        • Hydra Cheat Sheet
        • LFI RFI
        • LSASS
        • Log4j
        • NTLM Reflection
        • OSINT
        • Website spoofing
        • Tools
        • Windows methodology
        • XXS
        • Main
          • PetitPotam (NTLM Coercion via EFSRPC)
          • Active Directory
          • Command and Control
          • Feroxbuster
          • Gobuster
          • Hashcat 1
          • [[John]] the Ripper Cheat Sheet
          • Links
          • Mindmap Pentest Active Directory
          • Reverse shells
          • Rustscan
          • SQLmap Cheat Sheet
          • Ffuf
          • Advanced CPU-based password recovery utility
          • Kerbrute
          • Main
          • Metasploit Cheat Sheet
          • Mitmproxy
          • Netdiscover
          • Ss
              • NFS
              • SMB
              • Telnet
              • Ftp
              • Main
            • Firewall Evasion
            • ICMP Network Scanning
            • NSE Scripts
            • NULL, FIN, Xmas
            • SYN Scans
            • Scan Types Overview
            • TCP Connect Scans
            • UDP Scans
            • Main
            • Nmap Cheat Sheet
            • Nmap
          • Kerberoasting
          • EvilGinx
          • IP warming
          • Certificate vulnerability, FTP and SFTP
          • Unblocking text selections
          • 1 SQL Injection.excalidraw
          • 2 SQL injection types
          • Cybrary Injection Lab
          • Fuzzing
          • Resources
          • SQL basic queries by THM
          • [[SQL injection]] step by step guide
          • SQL injection by TryHackMe
          • SQL Injection Cheatsheet
          • Tools
          • Tryhackme SQL Injection
          • Books
            • 1 Lab SQL injection vulnerability in WHERE clause allowing retrieval of hidden data
            • 2 Lab SQL injection vulnerability allowing login bypass
            • 3 Lab SQL injection UNION attack, determining the number of columns returned by the query
            • Lab SQL injection UNION attack, finding a column containing text
            • Lab SQL injection UNION attack, retrieving multiple values in a single column
            • Portswigger
            • [[SQL injection]] cheat sheet
        • MSSQL
        • Mysql
        • Hashes
        • Repos
          • Ftp
          • BBOT Pentesting Workflow for HackTheBox
        • Hacking
      • Main
      • Allwin interview questions
      • Other shows
        • Anchor Ad
        • EP 47 Zoog's Deux
        • Flash Drives
        • Ep 10 Social security scam Social Security RoboCalls
        • Ep 11 RoboCalls & Utility Scams
        • Ep 12 Public Wi Fi
        • Ep 13 VPN's
        • Ep 14 Phishing
        • Ep 15 Spear Phishing
        • Ep 16 Smishing
        • Ep 17 Ransomware
        • Ep 18 Backups
        • Ep 19 Whaling
        • Passwords
        • Ep 20 haveibeenpwned.com
        • Ep 21 Shodan.io
        • Ep 22 Software updates
        • Ep 23 Animal Jam Passwords
        • Ep 24 Coronavirus Phishing Scams
        • Ep 25 Robocalls with Dominic
        • Ep 26 Zero Days
        • Ep 27 CD Projekt Red's CyberPunk Breach
        • Ep 28 Silver sparrow discovered by Red Canary
        • Ep 29 Microsoft Exchange Server hack
        • Secure passwords
        • Ep 30 Allwin interview
        • Ep 31 RAT's Remote Access Trojans
        • Ep 32 Gamers and Modders are under attack
        • Ep 33 FBI remotely hacking servers
        • Ep 34 Colonial Pipeline ransomware attack
        • Ep 35 EA Electronic Arts Hack
        • Ep 36 Twitch Hack
        • Ep 37 Log4shell, Log4j
        • Ep 39 Russia Ukraine cyber war discussion with Stefan
        • Password Managers
        • Ep 40 LastPass Breach
        • Ep 41 What a phishing attack looks like
        • Ep 42 Interviewing Industry Professional Zoogs
        • Ep 43 Tegora
        • @Fullstacklive interview
        • Ep 45 Senior Penetration Tester TechPenguin
        • Ep 46 ANYAscii
        • 2FA 2 factor Authentication
        • Ep 6 Virus Total Website
        • Ep 7 KnowBe4 website
        • Ep 8 Hacking Humans podcast by Cyberwire with Dave Bitner and Joe Carrigan
        • Ep 9 Credit Card scam Credit Cards Robo Calls
        • After Recording
        • Ep N Browser in the Browser attack on Steam users
        • Ep N Medibank
        • Ep N Microsoft Teams
        • Ep N Rockstar GTA6 hack
        • Ep N Uber Breaach
        • Interview with Kelvin / GrepStrength and Presentation
        • Ep N optus api breach
        • Ep N xmetrix theo doxing
        • Ep ideas
        • Industry Professional interview outline
        • Twitch, YT, TikTok upload defaults 1
      • Rea Info Sys Road Show
        • 2024 topics
        • 2025 topics
        • HackYSU 2024
        • 1. Intro
        • What does a Penetration Tester Do?
      • Echo server Echo client
      • Raspberry Pi
        • HTTP protocol
      • ELK stack
      • T pot
      • Cheat Sheet
      • Training
      • Machine
      • Setup
      • VM's
      • Getting started
      • 1. Main Functions of Splunk Enterprise
      • 2. Splunk Web
      • Incident Handling Process
      • Sigma
      • Splunk has 3 major components
      • THM Splunk
      • THM Splunk101
      • Chad n00b defcon questions
      • Community Gaming
      • Content
      • Convert YT to Sound clip
      • Dramatic Readings of man pages
      • Emotes
      • Loaf's, Nori and Jess favorite js tool
      • Movies
      • Redeems
      • Resources
      • Rick roll link
      • Shortcuts
      • Simple Pleasures in life
      • Start your Day
      • Topics
      • Try Hack Me New Cyber Security 101 Learning Path
      • Twitch, YT, TikTok upload defaults
      • Viewer nicknames
      • Xmetrix
      • Bots to ban list
      • Channel trailer
      • Chat commands
      • Hyperate
      • Issues
      • Path to partner
      • Quotes
      • Shorts
      • Tts fun
        • Make a wish
        • Data Sherpa
        • Dragunov308
        • Lil Bryan To do
        • Melosh101
        • R4yyR4yy
        • Rain
        • Swevenski
        • WheelThis
        • Z Hackz To do
        • Zoogs
        • I processor
        • Iamxavier
        • League of lego boy99
        • Meknors chef
        • Msec
        • Theuntippable
        • T shirt Contest
        • SMG output
        • Music
        • Scroller
        • Painful IT bot
        • TwitcHack Commands
        • AI
        • Chat controlled lights
        • Main
      • Handwritten notes
      • chatGPT with obsidian note taking
      • Assessments
        • 1. IP addresses
        • 2. MAC Addresses
        • 3. TCP, UDP and the 3 Way Handshake
        • 4. Common Ports and Protocols
      • 01 overview
      • 1. Linux
      • 2. Networking and scripting
      • Advent of Cyber 2023
      • Basic Pentesting
      • Brooklyn99
      • Linux PrivEsc
      • OpenVPN
      • Overpass
      • Principles of Security
      • SQL injection Blue Room
      • Super Spam
      • Vulnerability Searching
      • Command line upgrade
      • AlienVault OTX
      • CVE North Stars
      • CVE
      • Vulnerability Research Centre Centre de recherche sur les vulnérabilités
      • Webinstall.dev
      • Custom windows install
      • Rwxrob custom windows terminal
        • Untitled
      • Blog
      • Archive
            • Chalkboard
            • Chart
            • Custom controls
            • reveal.js-menu
            • CONTRIBUTING
      • Taggart Institute homelab Almanac
      • Invoke 1
      • Creative Commons License
        • 0 Goals
        • 01
        • 02
        • 03
        • 04
        • 05
        • 06
        • SKILSTAK Beginner Boost - Week 7
        • SKILSTAK Beginner Boost - Week 8
        • ⚡ SKILSTAK Beginner Boost 2022 - Week 9
        • Skilstack Beginner Boost VM
        • Rules

    NTLM Reflection

    SYNACTIV - reflection is dead, long live NTLM reflection! – An in-depth analysis of CVE-2025-33073

    Made with Material for MkDocs