[ArkhamKnight-47]

Hidden Content

You must register or login to view this content.

[ArkhamKnight-47]

This provides the complete process for capturing the flags.

[CyberBlade]

Thanks alot Mate
this is usefull

[vladiksin]

Thnaks for content

[0xbeef]

How did you get the hash of the admin on WEB-01 is what I am dying to understand. I did the ntlmrelayx but did not get anywhare. Please I am trying to understand what I am doing wrong

[ArkhamKnight-47]

How did you get the hash of the admin on WEB-01 is what I am dying to understand. I did the ntlmrelayx but did not get anywhare. Please I am trying to understand what I am doing wrong

You can use certipy,

certipy auth -pfx 'WEB-01$.pfx' -u 'WEB-01$' -domain darkcorp.htb -dc-ip 172.16.20.1 -debug

The command uses Certipy to authenticate as the WEB-01$ machine account on the darkcorp.htb domain using a .pfx certificate instead of a password or hash, targeting the Domain Controller at 172.16.20.1.

[Zephyru]

thnx for this mate, great work really appreciate it lad

[valentinbvro]

im intrested on the info!!!!!!!!!!!!!