[NEW] JOIN OUR TELEGRAM
BUY CREDITS !!
Temporary Advertisements:
Ad
Ad
Ad
Administrator - Medium - Windows
by metasan - Saturday November 9, 2024 at 01:53 PM
Breached
Member
Posts: 24
Threads: 5
Joined: Oct 2023
Reputation: 1
#11
Nov 09, 2024, 10:40 PM
evil-winrm -i administrator.htb -u administrator -H 3dc553ce4b9fd20bd016e098d2d2fd2e
Reply
Banned

Posts: 32
Threads: 1
Joined: Jan 2024
Reputation: 0
#12
Nov 09, 2024, 10:45 PM
Could someone provide a step by step details please ?
I've looked into Olivia's privs but they don't lead anywhere :

Privilege Name Description State
============================= ============================== =======
SeMachineAccountPrivilege Add workstations to domain Enabled
SeChangeNotifyPrivilege Bypass traverse checking Enabled
SeIncreaseWorkingSetPrivilege Increase a process working set Enabled

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Reply
Elite User

Posts: 196
Threads: 31
Joined: Apr 2024
Reputation: 13
#13
Nov 09, 2024, 11:18 PM
(Nov 09, 2024, 10:59 PM)MEGAZORD Wrote: After compromise michael, whats next? Cant find a way to go to emily

Try looking in FTP as Benjamin with his creds
Reply
Banned

Posts: 32
Threads: 1
Joined: Jan 2024
Reputation: 0
#14
Nov 10, 2024, 12:32 AM (This post was last modified: Nov 10, 2024, 01:13 AM by hollb_geek.)
(Nov 09, 2024, 10:58 PM)bestmajor Wrote:
(Nov 09, 2024, 10:45 PM)hollb_geek Wrote: Could someone provide a step by step details please ?
I've looked into Olivia's privs but they don't lead anywhere :

Privilege Name                Description                    State
============================= ============================== =======
SeMachineAccountPrivilege    Add workstations to domain    Enabled
SeChangeNotifyPrivilege      Bypass traverse checking      Enabled
SeIncreaseWorkingSetPrivilege Increase a process working set Enabled

We have an AD environment. Use bloodhound (for instance).

I started with bloodhound but i found no path from olivia

Edit: Nvm, i found genericall on Michael

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Reply
Elite User

Posts: 196
Threads: 31
Joined: Apr 2024
Reputation: 13
#15
Nov 10, 2024, 12:47 AM
(Nov 10, 2024, 12:32 AM)hollb_geek Wrote:
(Nov 09, 2024, 10:58 PM)bestmajor Wrote:
(Nov 09, 2024, 10:45 PM)hollb_geek Wrote: Could someone provide a step by step details please ?
I've looked into Olivia's privs but they don't lead anywhere :

Privilege Name                Description                    State
============================= ============================== =======
SeMachineAccountPrivilege    Add workstations to domain    Enabled
SeChangeNotifyPrivilege      Bypass traverse checking      Enabled
SeIncreaseWorkingSetPrivilege Increase a process working set Enabled

We have an AD environment. Use bloodhound (for instance).

I started with bloodhound but i found no path from olivia

I was not sure so I just kept moving around where I could until I saw one user had free root
Reply
Breached
Member
Posts: 41
Threads: 2
Joined: Sep 2023
Reputation: 0
#16
Nov 10, 2024, 09:32 AM
use this to get ethan from emily
https://github.com/ShutdownRepo/targetedKerberoast
Reply
Elite User

Posts: 196
Threads: 31
Joined: Apr 2024
Reputation: 13
#17
Nov 10, 2024, 04:09 PM (This post was last modified: Nov 10, 2024, 04:10 PM by maggi.)
(Nov 10, 2024, 09:32 AM)Unbutton8074 Wrote: use this to get ethan from emily
https://github.com/ShutdownRepo/targetedKerberoast

powerview for SPN jacking works too
Reply
Breached
Member
Posts: 47
Threads: 4
Joined: Nov 2023
Reputation: 0
#18
Nov 10, 2024, 10:15 PM
(Nov 09, 2024, 01:53 PM)metasan Wrote: Starter credential :  Olivia / ichliebedich

Hello,

How did you find olivia's password? by bruteforcing?

Thanks.
Reply
Breached
Member
Posts: 7
Threads: 0
Joined: Sep 2024
Reputation: 1
#19
Nov 10, 2024, 10:45 PM
(Nov 10, 2024, 10:15 PM)jahman Wrote:
(Nov 09, 2024, 01:53 PM)metasan Wrote: Starter credential :  Olivia / ichliebedich

Hello,

How did you find olivia's password? by bruteforcing?

Thanks.

Its given when starting the box.

Also the PSafe3 file can be brute forced, research on google.
Reply
Breached
Member
Posts: 2
Threads: 0
Joined: Nov 2023
Reputation: 0
#20
Nov 10, 2024, 11:07 PM
Stucked in michael, any hints?
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  CC,CVV,VBV,NON VBV ,DUMPS ,FULLZ,BANK LOGS (FULL INFO) BEST LINKABLES @RICKBUTLER Ballerwailer4G 0 40 1 hour ago
Last Post: Ballerwailer4G
  [FREE] HackTheBox Academy - CBBH CDSA CPTS All Modules Flags Techtom 110 14,257 6 hours ago
Last Post: Kazahk
Heart [FREE] HackTheBox All Cheatsheets Tamarisk 85 11,245 6 hours ago
Last Post: Kazahk
  [MEGALEAK] HackTheBox ProLabs, Fortress, Endgame - Alchemy, 250 Flags, leak htb-bot htb-bot 165 34,736 Yesterday, 08:27 AM
Last Post: groningen1981
  Finding solutions/flags/writeups for challenges meomeothantai 0 178 Yesterday, 04:13 AM
Last Post: meomeothantai

Forum Jump:


 Users browsing this forum: 6 Guest(s)