pentestmedium

Рекрутинговое агентство (Recruiting Agency)

hackerlab

Task: Pentest Windows AD Domain Controller machine. Solution: AS-REP Roasting to get initial credentials, SMB enumeration to find PowerShell history with second user credentials, WinRM over SSL and RDP for flag access.

$ ls tags/ techniques/
winrmsmbactive_directoryas_rep_roastingkerberosrdppowershell_historywindows_server
as_rep_roastingsmb_enumerationpowershell_history_forensicswinrm_sslcredential_discovery
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]