Valid Accounts
Logging in with legitimate credentials you already have: reused, found in a file or cracked.
How it shows up on Hack The Box
Every password you find, try it against every user and service (SSH, SMB, WinRM, su). On HTB password reuse is so common it is almost a rule.
Techniques in our catalog that match this one (the number is their machines):
Machines to practice it
Sorted from easiest to hardest. The ▶ link takes you to the minute of the IppSec video where it is used.
Commands
Taken from our cheatsheets and tool pages. Type your details and they are filled into every command.
Your values
Saved in this browser and applied to every cheatsheet.
Linux privilege escalation › Checks
Password reuse
su rootTry every password you find with root and with every other user.
Windows and Active Directory privilege escalation › Active Directory
Check credentials and access
netexec smb 10.10.11.20 -u 'usuario' -p 'Password123!'
netexec winrm 10.10.11.20 -u 'usuario' -p 'Password123!'No command matches.