/explore
|
You are here 
|
securitypimp.net | ||
| | | | |
0xdf.gitlab.io
I loved Sizzle. It was just a really tough box that reinforced Windows concepts that I hear about from pentesters in the real world. I'll start with some SMB access, use a .scf file to capture a users NetNTLM hash, and crack it to get creds. From there I can create a certificate for the user and then authenticate over WinRM. I'll Kerberoast to get a second user, who is able to run the DCSync attack, leading to an admin shell. I'll have two beyond root sections, the first to show two unintended paths, and the second to exploit NTLM authentication over HTTP, and how Burp breaks it. |
|
| | | | | ||
| | | | |
blog.ikuamike.io
|
|
| | | | | ||
| | | | |
shellsharks.com
A walkthrough of pwning the HackTheBox machine |
|
| | | | | ||
| | | | |
0xdf.gitlab.io
Active was an example of an easy box that still provided a lot of opportunity to learn. The box was centered around common vulnerabilities associated with Active Directory. There's a good chance to practice SMB enumeration. It also gives the opportunity to use Kerberoasting against a Windows Domain, which, if you're not a pentester, you may not have had the chance to do before. |
|
| | | |||
