Nov 20, 2024, 02:25 AM
- Details:
- GlobalProtect VPN User Access for a State Owned Thai Bank.
- Good for anyone who wants a clear and easy path from Initial Access to compromising the whole network w/ DA.
- Privileges:
- Active Directory Domain User which was earlier found to have privileges to login to a few computers with local admin.
- Due to the above, the attack path to DA will most likely be a very simple token impersonation attack.
- Financials (Private Company - Private Companies don't publicly report revenue so getting an accurate amount is difficult):
- $75-100m Annual Revenue according to some websites.
- $2B+ Total Assets according to a 2017 report.
- Extras:
- ADFind Report Included
- Password used on the user was found to be used across multiple users, you might want to try password spraying.
- The Main EDR used on most of the network is ESET - ESET Inspect Server can be pinged and port is 445 open.
- Backup Software is On-Prem Veeam - VeeamServer can be pinged and port 445/3389 is open.
- Price:
- $1750
- Price is not negotiable
- Contact Details:
- (TOX) 23D646409657712547FBF1D554375B3ED8A0F626A8DA581156218FBA885002645779B98358DB
- Deal will be done through BreachForums Escrow
- GlobalProtect VPN User Access for a State Owned Thai Bank.
- Good for anyone who wants a clear and easy path from Initial Access to compromising the whole network w/ DA.
- Privileges:
- Active Directory Domain User which was earlier found to have privileges to login to a few computers with local admin.
- Due to the above, the attack path to DA will most likely be a very simple token impersonation attack.
- Financials (Private Company - Private Companies don't publicly report revenue so getting an accurate amount is difficult):
- $75-100m Annual Revenue according to some websites.
- $2B+ Total Assets according to a 2017 report.
- Extras:
- ADFind Report Included
- Password used on the user was found to be used across multiple users, you might want to try password spraying.
- The Main EDR used on most of the network is ESET - ESET Inspect Server can be pinged and port is 445 open.
- Backup Software is On-Prem Veeam - VeeamServer can be pinged and port 445/3389 is open.
- Price:
- $1750
- Price is not negotiable
- Contact Details:
- (TOX) 23D646409657712547FBF1D554375B3ED8A0F626A8DA581156218FBA885002645779B98358DB
- Deal will be done through BreachForums Escrow