How to Hack Like a Pornstar by Sparc FLOW

Author:Sparc FLOW [FLOW, Sparc]
Language: eng
Format: epub
Tags: security, hacking, cybersecurity, malware, virus
Publisher: Sparc FLOW
Published: 2017-01-25T23:00:00+00:00

It’s raining passwords

So far, we have two local Windows accounts that seem promising: admin_svc and admin_mnt. Promising in the sense that they might be used on other Windows machines as well and save us a lot of trouble. How can we find that out? Simple enough: we connect to every machine and test whether these accounts work or not.

Crackmapexec does the job just fine. It uses a combination of WMI calls (Windows Management Instrumentation) and SMB (file-sharing) requests to interact with remote machines.

For our brute force scenario, we only need the SMB port (445), so we go back to our nmap result and get the list of machines displaying such a port. We then launch CrackMapExec (CME) with the credentials we got earlier. Since we use local accounts we add the ‘-d WORKGROUP’ switch.

FrontGun$ proxychains crackmapexec -u admin_svc -p Hello5me -d WORKGROUP 192.168.1.116 192.168.1.88 192.168.1.70

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.