Active Directory Federation Services (AD FS) 2.0 makes it possible to deploy a federation server and begin issuing tokens quickly by following these steps: 1) AD FS 2.0 software installation 2) Initial configuration 3) Add a relying party trust 4) Ad…
https://docs.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/hello-key-trust-adfs Windows Hello for Business works exclusively with the Active Directory Federation Service role included with Windows Server 2016 and require…
Applies To: Windows Server 2016, Windows Server 2012 R2, Windows Server 2012 You will find links to Active Directory Domain services content on this page. What's new in Active Directory Domain Services AD DS Getting Started AD DS Design and Planning…
1.Summaize the book  Practical  Web Penetration Testing first  nmap tools is important for gather information of servers nmap -sn [ip]     ping scan Netdiscover -r [ip] nmap -sS -sC -sV --version-all -O --osscan-guess -T4 --reason --open -p- -Pn -v 1…
1.we sue the Search Engines Shodan we can gather much information on the line web , such we want to find a American IIS service  we can use the commands :  IIS 8.0 hostname:microsoft.com  country:US the key words :   country :US      city:Baijing   h…
2.信息收集 信息收集是属于前期交互阶段所需要了解的问题. 2.1.前期交互内容 签署授权文件:首要要和受测试方签订授权协议. 划定范围:指定了一个二级域名作为测试目标,那么其他二级域名在测试范围内.如果测试目标是在其他服务厂商,或者服务器上有其他额外的测试目标是否划入范围内. 情报搜集:开放渠道情报.网络踩点.识别目标防护机制(管理.网络.主机.应用). 2.2.开放渠道情报 数据来源:搜索引擎提供的开放情报.社交网站.地方性门户.电子邮件服务提供商 关注点:企业情报.个人情报 2.3.网络踩…
Common Tools Google Exploit-DB/Google Hacking DB WHOIS Netcraft theharvester Example: Google search:   site:cnn.com -site:www.cnn.com filetype:pdf More google search syntax canbe found on the site : https://support.google.com/websearch/answer/2466433…
Explore online vulnerability for servers and IoT devices : https://www.shodan.com get dumped leaked information : https://www.pastebin.com Text  and source code leak: https://github.com online Swiss Army knife tools: https://www.dnsstuff.com also use…
In this Document   Purpose   Troubleshooting Steps   References APPLIES TO: Oracle Database - Enterprise Edition - Version 8.0.6.3 and later Information in this document applies to any platform. PURPOSE The purpose of this document is to provide some…
1. Banner grabbing with Netcat Netcat is multipurpose networking tool that can be used to perform multiple information gathering an d scanning tasks with kali linux ,this specific recipe will demonstrate how to use Netcat to acquire service banners i…
安装 Active Directory 管理工具 To manage your directory from an EC2 Windows instance, you need to install the Active Directory Domain Services and Active Directory Lightweight Directory Services Tools on the instance. 主题 Install the Active Directory Admini…
本文内容 概述 工作组架构与域架构 名称空间(Namespace) 对象(Object).容器(Container)与组织单位(Organization Units,OU) 域树(Domain Tree) 林(Forest)   概述 Active Directory 域服务(Active Directory Domain Services,AD DS),是一个提供用于组织.管理与控制网络资源的强大工具.在你创建并使用域时,有些必要知道关于域服务的一些概念.理念. Active Director…
如果证书服务器已经安装了的话,跳过这一步骤,直接进入下一步.下面步骤中的屏幕截图是从 Windows 2008 服务器版上安装的截图,针对 2000 和 2003 安装过程是一样的. 作为系统管理员登录你的 Active Directory 服务器. 单击 开始(Start),指向管理员工具(Administrative Tools),然后单击 服务器管理(Server Manager). 在规则摘要选项(Roles Summary),单击添加规则(Add Roles). 在选择服务器角色(Se…
There are interesting new features now made available in Windows Server 2016 such as time based group membership, privileged access management, and others. Most will be covered in future posts. This post will detail how to install active directory on…
Windows Server 2016 is the newest server operating system released by Microsoft in October 12th, 2016. In this tutorial I will go through step by step on how to install the Active Directory ( AD ) role on Windows Server 2016. If you are setting up th…
1.Bound Services A bound service is the server in a client-server interface. A bound service allows components (such as activities) to bind to the service, send requests, receive responses, and even perform interprocess communication (IPC). A bound s…
Bound Services 1.In this document The Basics Creating a Bound Service Extending the Binder class Using a Messenger Binding to a Service Additional notes Managing the Lifecycle of a Bound Service Key classes Service ServiceConnection IBinder Samples R…
在活动目录中部署两台主控域控制器,两台域控制器互为冗余. Server 2012 R2新建活动目录和DC refer to: https://www.cnblogs.com/jfzhu/p/4006118.html Add another domain controller as backup domain controller. 1. Create vm and rename computer name 2. Close firewall 3. Add existed DC ip as DNS…
1. 首先打开Manage --> Add Roles and Features 2. 点击Next 3. 不做修改,点击Next 4. 不做修改,点击Next 5. 选择Active Directory Domain Services 和 DNS Server 6. 点击Add Features 7. 点击Add Features 8. 点击Continue 9. 不做修改,点击Next 10. 点击Next 11. 点击Next 12. 点击Install 13. 安装中 14. 点击Pro…
Not many people talk about serious Windows privilege escalation which is a shame. I think the reasons for this are probably (1) during pentesting engagements a low-priv shell is often all the proof you need for the customer, (2) in staged environment…
The Best Hacking Tools Hacking Tools : List of security tools specifically aimed toward security professionals for testing and demonstrating security weaknesses.     Passwords Cain & Abel Cain & Abel is a password recovery tool for Microsoft Opera…
目录 nmap使用手册 附录: nmap使用手册 附录: NMAP(1) Nmap Reference Guide NMAP(1) NAME nmap - Network exploration tool and security / port scanner SYNOPSIS nmap [Scan Type...] [Options] {target specification} DESCRIPTION Nmap ("Network Mapper") is an open sourc…
A cheat sheet for PortSwigger Burp Suite application security testing framework. Send to Repeater Ctrl+R Send to Intruder Ctrl+I Forward intercepted Proxy message Ctrl+F Toggle Proxy interception Ctrl+T Switch to Target Ctrl+Shift+T Switch to Proxy C…
BlackArch-Tools 简介 安装在ArchLinux之上添加存储库从blackarch存储库安装工具替代安装方法BlackArch Linux Complete Tools List 简介 BlackArch Linux是针对渗透测试人员和安全研究人员的基于Arch Linux的渗透测试分发版.BlackArch Linux预装有上千种专用工具以用于渗透测试和计算机取证分析.BlackArch Linux与现有的Arch安装兼容.您可以单独或成组安装工具.https://blackar…
[it-ebooks]电子书列表   [2014]: Learning Objective-C by Developing iPhone Games || Leverage Xcode and Objective-C to develop iPhone games http://it-ebooks.info/book/3544/Learning Web App Development || Build Quickly with Proven JavaScript Techniques http:…
Find and exploit SQL Injections with free Netsparker SQL Injection Scanner SQL Injection Cheat Sheet, Document Version 1.4 About SQL Injection Cheat Sheet Currently only for MySQL and Microsoft SQL Server, some ORACLE and some PostgreSQL. Most of sam…
http://www.shouce.ren/post/d/id/112300    黑客攻防实战入门与提高.pdfhttp://www.shouce.ren/post/d/id/112299    黑客入门新手特训.pdfhttp://www.shouce.ren/post/d/id/112298    黑客与设计-剖析设计之美的秘密(彩印).pdfhttp://www.shouce.ren/post/d/id/112297    鸟哥的LINUX私房菜:服务器架设篇 (第二版).pdfhttp…
参考网站:https://technet.microsoft.com/en-us/library/bb490995.aspx 备注:网站内容是翻译得来,源网站在上面 SC 与服务控制器和已安装的服务进行通信.exe检索和设置关于服务的控制信息.您可以使用sc.exe来测试和调试服务程序.存储在注册表中的服务属性可以设置为控制如何在启动时启动服务应用程序,并作为后台进程运行.exe参数可以配置特定的服务,检索服务的当前状态,以及停止和启动服务.您可以创建调用各种sc.exe命令的批处理文件,以自动…
介绍:介绍一下用VC++/MFC写的最好的开源项目. Sourceforge.net中有许多高质量的VC++开源项目,我列举了一些可以作为VC++程序员的参考. 正文: VC++.MFC中最好的开源项目 作者:Sudhir Mangla VC++.MFC中最好的开源项目 作者:Sudhir Mangla 改编:http://www.okbase.net/home/haobao 介绍一下用VC++/MFC写的最好的开源项目. Sourceforge.net中有许多高质量的VC++开源项目,我列举了…
Conferences ACM SEACM Southeast Regional Conference ACM Southeast Regional Conference the oldest, continuously running, annual conference of the ACM. ACMSE provides an excellent forum for both faculty and students to present their research in a frien…