dcsync Archives • Vulndev

30JulJuly 30, 2020

Sauna @ HackTheBox

Sauna is a 20-point Windows Machine on HackTheBox. For user, we bruteforce usernames and then use ASREP-Roasting to obtain the hash of one the users. For root, we find the logon password for an account that has DCSync privileges and then use secretsdump.py to execute the attack.

By xctCTFasrep-roasting, dcsync, hackthebox, secretsdump, windows

Forest @ HackTheBox

Forest is a 20-point active directory machine on HackTheBox that involves user enumeration, AS-REP-Roasting and abusing Active Directory ACLs to become admin.

By xctCTFactive directory, asrep-roasting, bloodhound, dcsync, hackthebox, windows

Tag - dcsync