Skip to content

PurpleSec

LNK File Attacks

Home
Blog
Podcasts
Knowledge Base
Pwned
Certifications
About
Contact

PurpleSec

Home
Blog
Podcasts
Knowledge Base
Knowledge Base
- Reconnaissance
  Reconnaissance
  - Network Footprinting
    Network Footprinting
    
    SMTP
    
    IMAP & POP3
    
    SNMP
    
    MySQL
    
    MSSQL
    
    Oracle TNS
    
    IPMI
    
    DNS
    
    NFS
    
    SMB
    
    FTP
  - Information Gathering - Web Edition
    
    Information Gathering - Web Edition
    
    WHOIS
    
    Digging DNS
    
    Subdomain Bruteforcing
    
    DNS Zone Transfers
    
    Virtual Hosts
    
    Fingerprinting
    
    Crawling
    
    Search Engine Discovery
    
    Web Archives
    
    Automating Recon
    
    Certificate Transparency Logs
- Web Attacks
  Web Attacks
  - File Upload Attacks
    
    File Upload Attacks
    
    Fingerprinting the Web Stack
    
    Absent Validation
    
    Weaponization
    
    Client-Side Validation
    
    Blacklist Filters
    
    Whitelist Filters
    
    Type & MIME Filters
    
    Limited File Uploads
    
    Prevention & Hardening
    
    Cheatsheet
    
    Practice
  - SQL Injection
    SQL Injection
    
    Theory & Exploitation
    
    Theory & Exploitation
    
    Subverting Logic & Comments
    
    Identifying Vulnerabilities
    
    In-Band SQLi
    
    Blind SQLi
    
    Out-of-Band SQLi
    
    Advanced Exploitation
    
    WAF Bypassing
    
    Database Cheatsheet
    
    SQLMap
    
    SQLMap
    
    Getting Started
    
    Output Description
    
    Running on HTTP Requests
    
    Handling Errors
    
    Attack Tuning
    
    Database Enumeration
    
    Advanced Enumeration
    
    Advanced Usage
    
    Bypassing Protections
    
    OS Exploitation
- Credential Attacks
  Credential Attacks
  - Password Cracking Techniques
    Password Cracking Techniques
    
    Introduction to John The Ripper
    
    Introduction to Hashcat
    
    Writing Custom Wordlists and Rules
    
    Cracking Protected Files
    
    Cracking Protected Archives
  - Remote Password Attacks
    Remote Password Attacks
    
    Network Services
    
    Spraying, Stuffing, and Defaults
    
    Exercise
  - Extracting Passwords from Windows Systems
    Extracting Passwords from Windows Systems
    
    Windows Authentication Process
    
    Attacking SAM, SYSTEM, and SECURITY
    
    Attacking LSASS
    
    Attacking Windows Credential Manager
    
    Attacking Active Directory and NTDS.dit
    
    Credential Hunting in Windows
  - Extracting Passwords from Linux Systems
    Extracting Passwords from Linux Systems
    
    Linux Authentication Process
    
    Credential Hunting in Linux
  - Extracting Passwords from the Network
    Extracting Passwords from the Network
    
    Credential Hunting in Network Traffic
    
    Credential Hunting in Network Shares
  - Windows Lateral Movement Techniques
    Windows Lateral Movement Techniques
    
    Pass the Hash (PtH)
    
    Pass the Ticket (PtT) from Windows
    
    Pass the Ticket (PtT) from Linux
    
    Pass the Certificate
  - Password Management
    Password Management
    
    Password Policies
    
    Password Managers
- Active Directory
  Active Directory
  - Initial Attack Vectors
    Initial Attack Vectors
    
    LLMNR Poisoning
    
    SMB Relay
    
    mitm6
  - Post-Compromise Enumeration
    Post-Compromise Enumeration
    
    BloodHound
    
    ldapdomaindump
    
    PingCastle
  - Post Compromise Attacks
    Post Compromise Attacks
    
    Dumping & Cracking Hashes
    
    Kerberoasting
    
    GPP Attacks
    
    Token Impersonation
    
    Mimikatz Credential Dumping
    
    LNK File Attacks
  - Post Domain Compromise
    Post Domain Compromise
    
    Dumping NTDS.dit
    
    Golden Ticket
  - ADCS Attacks
    ADCS Attacks
    
    Overview
    
    ESC1 - Misconfigured Templates
    
    ESC2 - Misconfigured Templates II
    
    ESC3 - Enrollment Agent
    
    ESC4 - Access Control
    
    ESC5 - PKI Object Access
    
    ESC6 - EDITF_ATTRIBUTESUBJECTALTNAME2
    
    ESC7 - CA Access Control
    
    ESC8 - Web Enrollment Relay
    
    ESC9 - No Security Extension
    
    ESC10 - Weak Cert Mapping
    
    ESC11 - NTLM Relay to ICPR
    
    ESC12 - ADCS on YubiHSM
    
    ESC13 - Issuance Policy
    
    ESC14 - altSecurityIdentities
    
    ESC15 - EKUwu Application Policies
    
    Golden Certificate
  - Important Attacks
    Important Attacks
    
    Pass the Hash
- Exploitation Frameworks
  Exploitation Frameworks
  - Metasploit
    Metasploit
    
    Introduction to MSFconsole
    
    Modules
    
    Targets
    
    Payloads
    
    Encoders
    
    Databases
    
    Plugins & Mixins
    
    Sessions & Jobs
    
    Meterpreter
    
    Writing & Importing Modules
    
    Introduction to MSFVenom
    
    Firewall & IDS/IPS Evasion
- Tool Guides
  Tool Guides
Pwned
Certifications
Certifications
- OSCP
- CPTS
  CPTS
  - Practice Machines & Exam Prep
- PNPT
- CISSP
About
Contact

Home
Knowledge Base
Active Directory
Post Compromise Attacks

LNK File Attacks

Was this page helpful?

Thank you for your feedback!

Let us know how we can improve this page in the comments section.

Made with Zensical