hacksmarter

Walktrhough: ShareThePainAD

Summary So we’re in. Well, “in” is a generous word — we’ve got a foothold on the internal network of hack.smarter, sitting at 10.1.126.160 (their DC, DC01). No creds, no history, just a network connection. The goal is simple on paper and brutal in practice: enumerate everything, exploit whatever’s exploitable, and walk out with full […]

BloodHound, GodPotato, hacksmarter, mssql, responder, SeImpersonatePrivilege, walkthroughs

Walktrhough: Sysco

Sysco, a Managed Service Provider, tasked us with an external penetration test against its Active Directory environment. I started without credentials and worked toward administrative access on the domain controller, following the evidence as it appeared. 1. Initial Recon — Finding Our Way In I started with RustScan against 10.0.25.216, then passed the results to […]

activedirectory, hacksmarter, pygpoabuse, walkthroughs