Haze

hard windows

Hack The Box machine, hard difficulty, with 10 identified techniques.

▶ Full video by IppSec Open on HTB

1. Initial access

  1. Public CVE exploitation ▶ watch in the video
  2. LFI / path traversal ▶ watch in the video
  3. Credentials in files ▶ watch in the video
  4. Domain LDAP/RPC enumeration ▶ watch in the video
  5. Password spraying and valid users ▶ watch in the video

2. Lateral movement to user

  1. gMSA accounts ▶ watch in the video
  2. ACL abuse (BloodHound) ▶ watch in the video
  3. Shadow Credentials ▶ watch in the video
  4. Backups and archives ▶ watch in the video

3. Privilege escalation to root/SYSTEM

  1. SeImpersonate / Potatoes ▶ watch in the video

Keep practising the same skills

Something missing or wrong on this page? Tell me →