Mist

insane windows

Hack The Box machine, insane difficulty, with 12 identified techniques.

▶ Full video by IppSec Open on HTB

1. Initial access

  1. LFI / path traversal ▶ watch in the video
  2. Public CVE exploitation ▶ watch in the video
  3. Hash cracking ▶ watch in the video
  4. AV and EDR evasion ▶ watch in the video

2. Lateral movement to user

  1. Phishing and malicious documents ▶ watch in the video
  2. ADCS (certificates) ▶ watch in the video

3. Privilege escalation to root/SYSTEM

  1. NTLM capture and relay ▶ watch in the video
  2. Kerberos delegation (RBCD) ▶ watch in the video
  3. Shadow Credentials ▶ watch in the video
  4. gMSA accounts ▶ watch in the video
  5. SAM/LSA/LSASS dumping ▶ watch in the video
  6. DCSync ▶ watch in the video

Keep practising the same skills

Something missing or wrong on this page? Tell me →