Tag: Password Spraying
All the articles with the tag "Password Spraying".
Kitsune — HackSmarter Pro Labs
Kitsune writeup (HackSmarter Pro Labs): anonymous SMB access, Password Safe cracking, PAC injection via ADCS ESC13, DACL abuse, DPAPI credential extraction, ReadGMSA, and NTDS.dit dump via Backup Operators.
Search — HackTheBox
Search writeup (HackTheBox): web credentials, Kerberoasting, password spraying, hidden Excel column, GMSA abuse and GenericAll to DC.