7MS #693: Pwning Ninja Hacker Academy – Part 3
Failed to add items
Sorry, we are unable to add the item because your shopping cart is already at capacity.
Add to basket failed.
Please try again later
Add to Wish List failed.
Please try again later
Remove from Wish List failed.
Please try again later
Follow podcast failed
Unfollow podcast failed
7MS #693: Pwning Ninja Hacker Academy – Part 3
-
Narrated by:
-
By:
About this listen
This week your pal and mine Joe “The Machine” Skeen kept picking away at pwning Ninja Hacker Academy. To review where we’ve been in parts 1 and 2:
- We found a SQL injection on a box called SQL, got a privileged Sliver beacon on it, and dumped mimikatz info
- From that dump, we used the SQL box hash to do a BloodHound run, which revealed that we had excessive permissions over the Computers OU
- We useddacledit.py to give ourselves too much permission on the Computers OU
Today we:
- Did an RBCD attack against the WEB box
- Requested a service ticket to give us local admin superpowers on WEB
- Performed a secretsdump against WEB
- Struggled to do a mimikatz dump at the end of the episode (after we ended the stream I realized I could’ve just done the mimikatz dump because I had local admin access! Oh well, we’ll pick things up again during part 4 next month!)
No reviews yet
In the spirit of reconciliation, Audible acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today.