Hathor

insane windows

Hack The Box machine, insane difficulty, with 9 identified techniques.

▶ Full video by IppSec Open on HTB

1. Initial access

  1. Default credentials ▶ watch in the video
  2. IIS and ASP.NET ▶ watch in the video
  3. Malicious file upload ▶ watch in the video
  4. AppLocker and Constrained Language Mode ▶ watch in the video

2. Lateral movement to user

  1. Credentials in files ▶ watch in the video
  2. SMB/NFS enumeration ▶ watch in the video
  3. DLL hijacking ▶ watch in the video
  4. Hash cracking ▶ watch in the video

3. Privilege escalation to root/SYSTEM

  1. Pass-the-hash / ticket ▶ watch in the video

Keep practising the same skills

Something missing or wrong on this page? Tell me →