Tag: HackSmarter
All the articles with the tag "HackSmarter".
Kitsune — HackSmarter Pro Labs
Kitsune writeup (HackSmarter Pro Labs): anonymous SMB access, Password Safe cracking, PAC injection via ADCS ESC13, DACL abuse, DPAPI credential extraction, ReadGMSA, and NTDS.dit dump via Backup Operators.
ShadowGate — HackSmarter Pro Labs
ShadowGate writeup (HackSmarter Pro Labs): anonymous AD enumeration, AS-REP Roasting, Shadow Credentials with Certipy, ESC8 and DCSync.