[Joseph]

thanks for sharing

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching.

[mhsoraa]

Stucked in michael, any hints?

Force change benjamin password [ Bloodhound: micheal = GenericAll => benjamin ]

HTB - Administrator Writeup | BreachForums

[Hax4]

Stucked in michael, any hints?

1. (bloodad) change pass olivia > michael
2. change pass michael > ben
3. get to ben's ftp > crack the stuff 
4. (targetedkerber.py) using emily creds > get ethan's hash
5. (impacket-secretsdump) using ethan's creds get you the admin hash 

... 

it got done in 9 minutes ....

---

Stucked in michael, any hints?

1. (bloodad) change pass olivia > michael
2. change pass michael > ben
3. get to ben's ftp > crack the stuff 
4. (targetedkerber.py) using emily creds > get ethan's hash
5. (impacket-secretsdump) using ethan's creds get you the admin hash 

... 

it got done in 9 minutes ....

[wizarddos]

use this to get ethan from emily
https://github.com/ShutdownRepo/targetedKerberoast

And if anyone here gets an error:
KRB_AP_ERR_SKEW(Clock skew too great)

You can solve it with this command

sudo ntpdate $IP | sudo python3 targetedKerberoast.py -d administrator.htb -u emily -p "[Password Here]" -v

Ofc replace [Pasword Here] with actually found password

Then use

sudo hwclock --hctosys --verbose

To revert clock back to your hardware time time

NTP date if not present, can be installed with package manager like apt

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[AnotherMember]

Im using CME but how did you guys bruteforce it fast i mean there are a few users and what wordlist did you use?

[ahmedmoody88]

Thanks dude, i am ready to pwn this box

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[id2746]

how to brut Backup.psafe3?
i use pwsafe2john to пet hash (Backu:$pwsafe$*3*4ff588b74906263ad2abba592aba35d58bcd3a57e307bf79c8479dec6b3149aa*2048*1a941c10167252410ae04b7b43753aaedb4ec63e3f18c646bb084ec4f0944050)
but cant crack it

used hascat -m9000 (-m5200 isnt working for me)
but have not results

[id2746]

блять ну ёбанарот, помогите разобраццо!!!

[wizarddos]

how to brut Backup.psafe3?
i use pwsafe2john to пet hash (Backu:$pwsafe$*3*4ff588b74906263ad2abba592aba35d58bcd3a57e307bf79c8479dec6b3149aa*2048*1a941c10167252410ae04b7b43753aaedb4ec63e3f18c646bb084ec4f0944050)
but cant crack it

used hascat -m9000 (-m5200 isnt working for me)
but have not results

This command worked for me

hashcat -m 5200 Backup.psafe3 -a 0 /usr/share/wordlists/rockyou.txt

---

блять ну ёбанарот, помогите разобраццо!!!

 как мы можем вам помоц?

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[id2746]

how to brut Backup.psafe3?
i use pwsafe2john to пet hash (Backu:$pwsafe$*3*4ff588b74906263ad2abba592aba35d58bcd3a57e307bf79c8479dec6b3149aa*2048*1a941c10167252410ae04b7b43753aaedb4ec63e3f18c646bb084ec4f0944050)
but cant crack it

used hascat -m9000 (-m5200 isnt working for me)
but have not results

This command worked for me

hashcat -m 5200 Backup.psafe3 -a 0 /usr/share/wordlists/rockyou.txt

---

блять ну ёбанарот, помогите разобраццо!!!

 как мы можем вам помоц?

))
а хэш снимал pwsafe2john?

такое чувство, что хэш битый...

В любом случае, спасибо за ответ!