pass-the-hash attack for windows privilege escalation

Автор: Faan Rossouw

Загружено: 2024-01-21

Просмотров: 3363

Описание: NEW: I'm launching a course for security practitioners

If you're a threat hunter, detection engineer, or incident responder who wants to build your own AI-powered tools (no coding required) - check out "Mastering Agentic AI for Threat Hunting"

→ Join the waitlist for 20% off: https://aionsec.ai/course

---

in this lesson we perform a pass-the-hash attack to escalate our privilige:
we start off as a lower-level user
we discover a keepass database
we use smb to exfiltrate the database to our system
we use keepass2john to extract the database hash
we use hashcat to crack the database hash
we discover a ntlm hash inside of the database
we use the ntlm hash + pthwinexe to spawn a new shell on the target system as administrator

+_+_+_+_+_+_+_+_+_+_+_+_+_+_+_+_+_+_+_+_+_+_+_+_+

music: 'shop' from the undertale OST by toby fox
Karl Casey @ White Bat Audio
twitter: @faanross
#cybersecurity #hackthebox #ctf

Не удается загрузить Youtube-плеер. Проверьте блокировку Youtube в вашей сети.
Повторяем попытку...

pass-the-hash attack for windows privilege escalation

Доступные форматы для скачивания:

Скачать видео

Информация по загрузке:

Скачать аудио

Похожие видео

Attacks on SMB

Взлом Bitlocker — обход шифрования диска Windows

Взлом Bitlocker — обход шифрования диска Windows

Mimikatz: Dump Hashes & Pass-the-Hash Attacks Simplified

Mimikatz: Dump Hashes & Pass-the-Hash Attacks Simplified

Типичное CTF задание, немного криптографии. Прохожу машину b3dr0ck на tryhackme, уровень easy.

Типичное CTF задание, немного криптографии. Прохожу машину b3dr0ck на tryhackme, уровень easy.

Атака Pass-The-Hash

Атака Pass-The-Hash

OSCP - Windows Privilege Escalation Methodology

OSCP - Windows Privilege Escalation Methodology

the world’s simplest custom payload (hackthebox jeeves ctf walkthrough)

the world’s simplest custom payload (hackthebox jeeves ctf walkthrough)

HackTheBox Chatterbox CTF walkthrough - Found Credentials + Buffer Overflow

HackTheBox Chatterbox CTF walkthrough - Found Credentials + Buffer Overflow

Security + 1.2 Pass the Hash Attack

Security + 1.2 Pass the Hash Attack

HackTheBox Jeeves CTF walkthrough - Juicy Potato Attack

HackTheBox Jeeves CTF walkthrough - Juicy Potato Attack

How to Defend Against Pass-the-Ticket Attacks: Stop PC Hacking Techniques in Active Directory

How to Defend Against Pass-the-Ticket Attacks: Stop PC Hacking Techniques in Active Directory

Как хакеры взламывают без пароля?! ПЕРЕДАЙТЕ ХЭШ

Как хакеры взламывают без пароля?! ПЕРЕДАЙТЕ ХЭШ

Windows Privilege Escalation - Searching For Passwords In Windows Registry

Windows Privilege Escalation - Searching For Passwords In Windows Registry

HASHCAT FULL COURSE ETHICAL HACKING

HASHCAT FULL COURSE ETHICAL HACKING

C# payload mastery 03 - basic evasion + time-delayed execution + junk code insertion

C# payload mastery 03 - basic evasion + time-delayed execution + junk code insertion

Как хакеры взламывают Google 2FA

Как хакеры взламывают Google 2FA

Прохождение TryHackMe CTF — Мистер Робот

Прохождение TryHackMe CTF — Мистер Робот

Attack Tutorial: How a Pass the Hash Attack Works

Attack Tutorial: How a Pass the Hash Attack Works

Domain Admin: Bloodhound, Mimikatz, Pass-The-Hash & Golden ticket.

Domain Admin: Bloodhound, Mimikatz, Pass-The-Hash & Golden ticket.

Stealing Windows Credentials Using Mimikatz - PenTesting Tutorial / Mimikatz Tutorial

Stealing Windows Credentials Using Mimikatz - PenTesting Tutorial / Mimikatz Tutorial