Vulnlab - Baby LdapSearch && SEbackupprivilege Exploitation

00:00 - Intro
00:40 - Start of Nmap Scan
02:01 - Smbmap to enumerate Shares
02:12 - smbclient to enumerate shares
02:41 - ldapsearch to enumerate information and getting usernames and password
06:16 - kerberute to verify the usernames are correct
07:30 - netexec to do banner grabbing and password spraying
10:30 - impacket-smbpasswd to change the password of caroline
13:00 - netexec shows pwned on the caroline password
13:46 - evil-winrm to login as caroline and gain initial foothold
14:39 - Start of privilege escalation
14:55 - Exploiting SEBackupPrivilege to gain administrator access and solving the box

Видео Vulnlab - Baby LdapSearch && SEbackupprivilege Exploitation канала Programmer Security LTD