ropnop blog

A place to dump things I find interesting and think others might want to know

Using Credentials to Own Windows Boxes - Part 2 (PSExec and Services)

Posted on April 20, 2016 | ropnop

Pentesters use PsExec style commands all the time, and in this post I'm going to explore and manually recreate the technique using native Windows tools. [Read More]

windows shell impacket penest psexec smb

Using Credentials to Own Windows Boxes

Using Credentials to Own Windows Boxes - Part 1 (from Kali)

Posted on April 16, 2016 | ropnop

Du'h...if you have admin creds you can own a box. But how many different ways can you do it? Here's a blog-ified version of my notes and my favorite methods [Read More]

kali windows impacket metasploit shell

Using Credentials to Own Windows Boxes

Plundering Docker Images

Posted on April 15, 2016 | ropnop

On a recent pentest, we recovered credentials to a private Docker registry. Looting the contained images yielded us source code and admin ssh keys. [Read More]

docker pentest

Installing Drozer on OS X El Capitan

Posted on April 14, 2016 | ropnop

Turns out installing Drozer on OS X is a pain. The latest versions of OS X doesn't include OpenSSL headers, which breaks dependencies. Here's my workaround. [Read More]

android osx