Pirate

hard windows

Hack The Box machine, hard difficulty, with 8 identified techniques.

▶ Full video by IppSec Open on HTB

1. Initial access

  1. Domain LDAP/RPC enumeration ▶ watch in the video
  2. Default credentials ▶ watch in the video
  3. gMSA accounts ▶ watch in the video

2. Lateral movement to user

  1. Internal services and port forwarding ▶ watch in the video
  2. Remote execution (WinRM, PsExec, WMI) ▶ watch in the video

3. Privilege escalation to root/SYSTEM

  1. Kerberos delegation (RBCD) ▶ watch in the video
  2. NTLM capture and relay ▶ watch in the video
  3. SAM/LSA/LSASS dumping ▶ watch in the video

Keep practising the same skills

Something missing or wrong on this page? Tell me →