00:00 - Introduction
00:58 - Start of nmap
03:30 - Taking a look at the website
05:50 - Using NetExec to search for file shares and discovering the Development share is open. Using smbclient to download everything
08:00 - Exploring the Ansible Playbooks in the Development Share to discover encrypted passwords (ansible vault)
10:00 - Converting the Ansible Vault Hashes to John/Hashcat format so we can crack them
13:30 - Decrypting the values and getting some passwords, one of which lets us log into PWM (webapp)
19:50 - Adding a rogue ldap server into the PWM Config, then clicking test config will send us the password for the ldap account
27:00 - Running Certipy to find the server is vulnerable to ESC1, we just need to enroll a computer
28:00 - Using NetExec to show how the MachineAccoutnQuote, confirming we can enroll machines
29:00 - Using Impacket to add a rogue computer
30:00 - Using Certipy to perform the ESC1, it works but smart card login isn’t enabled so we can’t
10 views
811
214
3 months ago 00:33:44 1
Best Hacking Laptop 2023
3 months ago 00:27:16 1
Top Hacking Books for 2023
3 months ago 02:00:43 1
hack the box
3 months ago 00:20:43 1
Расследую инцидент взлома | #HackTheBox | КАК ПРОЙТИ #
3 months ago 00:36:09 1
Прохождение #Linux-машины , сложного уровня | #HackTheBox | КАК ПРОЙТИ #
3 months ago 00:30:39 1
Прохождение Linux-машины средней сложности SANDWORM HackTheBox | КАК ПРОЙТИ
4 months ago 00:13:24 1
Прохождение задания UNDER CONSTRUCTION на Google CTF 2023 | КАК ПРОЙТИ UNDER CONSTRUCTION GOOGLE CTF
4 months ago 11:21:04 1
Bug Bounty Course 2024 Updated
4 months ago 07:22:03 1
Ultimate Guide to Ethical Hacking with Kali Linux #ethicalhacking #hacker
4 months ago 00:41:25 4
HackTheBox - Visual
5 months ago 05:30:24 3
George Hotz | Programming | Hack The Box | ctf practice for skill (should tomcr00se return?)
6 months ago 01:02:06 14
HackTheBox Zipping
6 months ago 00:16:21 18
HackTheBox - Sau
6 months ago 02:09:39 12
HackTheBox - Coder
6 months ago 00:15:02 1
Решение машины #topology на #hackthebox
6 months ago 00:13:41 1
Решение машины #cozyhosting на #hackthebox
7 months ago 00:46:30 1
Tier 0: HackTheBox Starting Point - 5 Machines - Full Walkthrough (for beginners)