Archives | Yangsir

2021

08

04

Some of the wordsOutlook is a special software for email management in Office software. Exchange users can use Outlook t

2021-08-04 Learning record

01

A solution to the failure of the trust relationship between this workstation and the primary domain

The causeThe domain controller is faulty and is redeployed. The domain machine is found to have the following problems,

2021-08-01 Tips

Domain environment Operations

07

31

Powershell bypass catch password

Some of the wordsFrom a practical point of view, solve the practical problems encountered, simple record, can bypass 360

2021-07-31 Learning record

Redteam Bypass Mimikatz Powershell Catch Password

30

Exchange Export email methods

IntroductionAssuming that you have obtained the administrative rights of the Exchange server, what you need to do now is

2021-07-30 Tips

Redteam Exchange Information collection Export Email Search Email

29

Exchange RCE methods

Get exchange versionYou can get some thing about version https://docs.microsoft.com/zh-cn/exchange&#

2021-07-29 Learning record

Redteam RCE Exchange CVE-2020-17144 CVE-2020-16875 CVE-2020-0688

27

ProxyLogon Utilization method (Manual use)

Some of the wordsHaving written a previous article on successful exploits, in order to figure out what was wrong with th

2021-07-27 Learning record

Redteam RCE Exchange ProxyLogon CVE-2021-26855 CVE-2021-27065

26

ProxyLogon Utilization method

Some of the wordsThe way of exploiting loopholes has come out long ago, mainly because there are more pits in the proces

2021-07-26 Learning record

Redteam RCE Exchange ProxyLogon CVE-2021-26855 CVE-2021-27065

24

Sqlserver common attack methods

IntroductionDefault port 1433, NMAP fingerprint is as follows: PORT STATE SERVICE VERSION 1433/tcp open ms-sq

2021-07-24 Tips

Redteam Command execution Information collection Sqlserver Database

23

Some ways to download files remotely from Github

IntroductionThe goal is to improve the traceability cost, avoid being detected by the traceability, and improve the conc

2021-07-23 Tips

Redteam Bypass File download

23

Supplementary information about obtaining LDAP information

IntroductionThe project encountered a pit point, some complement, the method of obtaining information to complement, in

2021-07-23 Tips

Redteam Bypass Intranet Information Collection