Posts: 116
Threads: 6
Joined: Mar 2024
ok. i think i got this getST part to impersonate admin
https://dirkjanm.io/worst-of-both-worlds...elegation/
always get confused with impacket tool sets...
Posts: 231
Threads: 18
Joined: Jul 2023
Apr 04, 2024, 05:23 PM
(This post was last modified: Apr 04, 2024, 06:01 PM by cavour13.)
i got svc_cabackup.ccache now? i also got op_sharron shell so now? dm if you can
Posts: 7
Threads: 0
Joined: Apr 2024
I am exporting the klist krbtgt ticket using mimikatz then converting it with msf to ccache but it's not working...
Can someone enlight please?
Posts: 57
Threads: 4
Joined: Apr 2024
(Apr 04, 2024, 05:23 PM)cavour13 Wrote: i got svc_cabackup.ccache now? i also got op_sharron shell so now? dm if you can
god plz anyone any help on relay part , petitpotam doesnt seem to work , how did y'all get the coercion to work , webdav isn't enabled and webclient service isn't even on the machine , how dafaq does the relay part work plz , i don't wnna slap in the leaked hash
Posts: 20
Threads: 0
Joined: Aug 2023
V (Apr 04, 2024, 10:22 PM)xss_02 Wrote: how do you guys are making proxychains / tunelling working? I trade for user (MS01) hash.
Dm me
either chisel client ip:port R  ocks
or ligolo-ng This forum account is currently banned. Ban Length: Permanent (N/A Remaining) Ban Reason: Scraping | https://breachforums.ai/Forum-Ban-Appeals if you feel this is incorrect.
Posts: 250
Threads: 22
Joined: Mar 2024
Posts: 57
Threads: 4
Joined: Apr 2024
(Apr 04, 2024, 10:22 PM)xss_02 Wrote: how do you guys are making proxychains / tunelling working? I trade for user (MS01) hash.
Dm me
u will trade ms01 hash or , the wayy to get ms01 hash ? xDDD hahaha
Posts: 16
Threads: 3
Joined: Jan 2024
(Apr 05, 2024, 06:42 AM)Prometheuss Wrote: (Apr 04, 2024, 10:22 PM)xss_02 Wrote: how do you guys are making proxychains / tunelling working? I trade for user (MS01) hash.
Dm me
u will trade ms01 hash or , the wayy to get ms01 hash ? xDDD hahaha
this guy doesnt know how to port forwading but he trade the hash of MS01 ahahaha i never seen a skid like that
Posts: 26
Threads: 0
Joined: Apr 2024
can someone give me a hint how to force the machine to authenticate to itself to grab the ntlm hash?
I've set up ligolo-ng and think it can be done with something like https://github.com/med0x2e/NTLMRelay2Self but the spooler service is stopped..
Am I on the wrong track? This forum account is currently banned. Ban Length: Permanent (N/A Remaining) Ban Reason: Leeching.
Posts: 57
Threads: 4
Joined: Apr 2024
(Apr 05, 2024, 11:16 AM)jonah Wrote: (Apr 05, 2024, 06:42 AM)Prometheuss Wrote: (Apr 04, 2024, 10:22 PM)xss_02 Wrote: how do you guys are making proxychains / tunelling working? I trade for user (MS01) hash.
Dm me
u will trade ms01 hash or , the wayy to get ms01 hash ? xDDD hahaha
this guy doesnt know how to port forwading but he trade the hash of MS01 ahahaha i never seen a skid like that
ikr xD lol , plus ms01 hash is littearlly in this thread somewhere already leaked, and how the fuk he's expecting to get through this box without even knowing how to tunnel
anyway, am still on the hunt for how to get the coercion to work lol xDD plz anyone , petitpotam or any coercion isn't working for some fuked up reason and can't enable webdav on ms01 how y'all managed to do that ? (the obvious didn't work for sure don't throw at me a script that will enable webclient service i tried didn't help )
|