APT - HackTheBox

APT is a 50-point machine on HackTheBox which involves getting the IPv6 Address via MS-RPC, credential spraying, and reading the boxes registry remotely. For root, we force authentication of the box's machine account to our box, capture it with responder, crack it, and then use secretsdump to obtain the administrator hash.

You are welcome to join my discord: https://discord.gg/qdbJqXKPQ3 !

[ Timestamps ]
00:00 Intro
00:23 User
13:55 Root

[ Notes & Links ]
• https://github.com/mubix/IOXIDResolver
• https://github.com/cube0x0/HashSpray.py
• https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-lan-manager-authentication-level
• https://notes.vulndev.io/notes/hackthebox/apt

[ Desktop ]
• https://github.com/xct/kali-clean

[ About ]
• https://vulndev.io
• https://twitter.com/xct_de
• https://github.com/xct
• https://www.patreon.com/xct

This is purely educational content - all practical work is done in environments that allow and encourage offensive security training.

Видео APT - HackTheBox канала xct