xct - vulnlab: Vulnlab | Retro - Password Spraying, Pre-Created Computer Accounts & ADCS // by r0BIT

Author: xct - Bewertung: 172x - Views:4446

This video by r0BIT (@0xr0BIT) is a walkthrough on Retro, a vulnerable machine on vulnlab.com. It involves Password Spraying, Pre-Created Computer Accounts & an ADCS Attack.



[ Timestamps ]

00:00 - Intro & General Enumeration

03:17 - Enumerate SMB Share

06:15 - Grabbing Domain Users

07:58 - Brute-Forcing Domain Logins

10:54 - ADCS Enumeration

15:30 - Fail to Request the Certificate

16:22 - Enumerate Machine Account Quota

17:45 - More SMB Enumeration

19:12 - Brief Intro to Pre2K

21:30 - Obtaining a Machine Account TGT

24:45 - Requesting a certificate

25:35 - Certipy being Certipy

26:19 - Obtaining DA NTLM Hash

27:11 - Compromise



[ Pentesting & Red Teaming Labs ]

• https://vulnlab.com



[ Discord ]

• https://discord.gg/vulnlab



[ Desktop ]

• https://github.com/xct/kali-clean

• https://www.yuumeiart.com/



[ About ]

• https://vulndev.io

• https://twitter.com/xct_de

• https://github.com/xct



This is purely educational content - all practical work is done in environments that allow and encourage offensive security training.