Ghost

insane windows

Hack The Box machine, insane difficulty, with 10 identified techniques.

▶ Full video by IppSec Open on HTB

1. Initial access

  1. Vhost and subdomain fuzzing ▶ watch in the video
  2. LDAP injection ▶ watch in the video
  3. LFI / path traversal ▶ watch in the video

2. Lateral movement to user

  1. Pass-the-hash / ticket ▶ watch in the video
  2. NTLM capture and relay ▶ watch in the video
  3. gMSA accounts ▶ watch in the video

3. Privilege escalation to root/SYSTEM

  1. MSSQL abuse ▶ watch in the video
  2. AV and EDR evasion ▶ watch in the video
  3. SeImpersonate / Potatoes ▶ watch in the video
  4. Domain and forest trusts ▶ watch in the video

Keep practising the same skills

Something missing or wrong on this page? Tell me →