HackTheBox - Granny and Grandpa

Name: HackTheBox - Granny and Grandpa
Uploaded: 2017-10-21T15:30:52Z
Channel: IppSec
Description: Heads up. The pivot idea, was a pretty big fail. Should of prep'd more but was short on time. Enjoy watching me struggle, if you wanted to see the pi...

IppSec · Intermediate ·📰 AI News & Updates ·8y ago

Heads up. The pivot idea, was a pretty big fail. Should of prep'd more but was short on time. Enjoy watching me struggle, if you wanted to see the pivot stuff working I uploaded an updated video here: https://youtu.be/HQkDL-xh7es 1:50 - Nmap Results (Discovery of WebDav) 4:35 - DavTest 6:22 - HTTP PUT Upload Files 7:00 - MSFVenom Generate aspx payload 13:00 - User Shell Returned 16:23 - Get Admin Shell (ms14-070) 17:14 - Beginning of Pivot Fail. Socks Proxy 29:35 - Shell on Grandpa (CVE-2017-7269) 32:45 - Using portfwd to access ports not exposed to routable interfaces 34:45 - Cracking LM…

Watch on YouTube ↗ (saves to browser)

Chapters (16)

1:50 Nmap Results (Discovery of WebDav)

4:35 DavTest

6:22 HTTP PUT Upload Files

7:00 MSFVenom Generate aspx payload

13:00 User Shell Returned

16:23 Get Admin Shell (ms14-070)

17:14 Beginning of Pivot Fail. Socks Proxy

29:35 Shell on Grandpa (CVE-2017-7269)

32:45 Using portfwd to access ports not exposed to routable interfaces

34:45 Cracking LM Hash Explanation

38:30 Cracking LM Hashes via Hashcat

41:30 Grandpa acts cranky. Revert.

42:30 Expected behavior when exploiting via CVE-2017-7269. None of that auto system

45:50 Using Hashcat to crack NTLM using LM Hashes

48:50 Finally log into SMB using the portfwd from 32:45

49:07 Random pivot attempt failure.

Playlist

Uploads from IppSec · IppSec · 23 of 60

← Previous Next →