DarkCorp

insane windows

Hack The Box machine, insane difficulty, with 15 identified techniques.

▶ Full video by IppSec Open on HTB

1. Initial access

  1. Cross-Site Scripting (XSS) ▶ watch in the video
  2. CSRF ▶ watch in the video
  3. SQL injection ▶ watch in the video

2. Lateral movement to user

  1. Credentials in files ▶ watch in the video
  2. SSRF ▶ watch in the video
  3. Internal services and port forwarding ▶ watch in the video
  4. NTLM capture and relay ▶ watch in the video
  5. ADCS (certificates) ▶ watch in the video
  6. Pass-the-hash / ticket ▶ watch in the video
  7. SAM/LSA/LSASS dumping ▶ watch in the video
  8. Saved credentials / DPAPI ▶ watch in the video
  9. Password spraying and valid users ▶ watch in the video

3. Privilege escalation to root/SYSTEM

  1. ACL abuse (BloodHound) ▶ watch in the video
  2. Hash cracking ▶ watch in the video
  3. GPP and GPO abuse ▶ watch in the video

Keep practising the same skills

Something missing or wrong on this page? Tell me →