Administrator - Medium - Windows
by metasan - Saturday November 9, 2024 at 01:53 PM
Banned

Posts: 48
Threads: 0
Joined: Jul 2023
Reputation: 0

#21
11-11-2024, 01:53 AM
thanks for sharing
Ban reason: Leeching. (Permanent)
Reply
Advanced User

Posts: 50
Threads: 18
Joined: Aug 2024
Reputation: 16

#22
11-11-2024, 03:22 AM (This post was last modified: 11-11-2024, 03:23 AM by mhsoraa.)
(11-10-2024, 11:07 PM)muyix Wrote: Stucked in michael, any hints?

Force change benjamin password [ Bloodhound: micheal = GenericAll => benjamin ]

HTB - Administrator Writeup | BreachForums
Reply
RaidForums
Member
Posts: 8
Threads: 0
Joined: Aug 2024
Reputation: 0

#23
11-14-2024, 02:12 PM (This post was last modified: 11-14-2024, 02:12 PM by Hax4.)
(11-10-2024, 11:07 PM)muyix Wrote: Stucked in michael, any hints?

1. (bloodad) change pass olivia > michael
2. change pass michael > ben
3. get to ben's ftp > crack the stuff 
4. (targetedkerber.py) using emily creds > get ethan's hash
5. (impacket-secretsdump) using ethan's creds get you the admin hash 

... 

it got done in 9 minutes .... Big Grin
(11-10-2024, 11:07 PM)muyix Wrote: Stucked in michael, any hints?

1. (bloodad) change pass olivia > michael
2. change pass michael > ben
3. get to ben's ftp > crack the stuff 
4. (targetedkerber.py) using emily creds > get ethan's hash
5. (impacket-secretsdump) using ethan's creds get you the admin hash 

... 

it got done in 9 minutes .... Big Grin
Reply
Banned

Posts: 24
Threads: 0
Joined: Nov 2024
Reputation: 0

#24
11-14-2024, 08:19 PM
(11-10-2024, 09:32 AM)Unbutton8074 Wrote: use this to get ethan from emily
https://github.com/ShutdownRepo/targetedKerberoast

And if anyone here gets an error:
KRB_AP_ERR_SKEW(Clock skew too great)

You can solve it with this command
sudo ntpdate $IP | sudo python3 targetedKerberoast.py -d administrator.htb -u emily -p "[Password Here]" -v

Ofc replace [Pasword Here] with actually found password

Then use

sudo hwclock --hctosys --verbose

To revert clock back to your hardware time time

NTP date if not present, can be installed with package manager like apt
Ban reason: Leeching | http://breachddyfwvcp4kzccos5oxtdbssmfbp...an-Appeals if you feel this is incorrect. (Permanent)
Reply
RaidForums
Member
Posts: 45
Threads: 4
Joined: Nov 2024
Reputation: 0

#25
11-15-2024, 09:53 AM
Im using CME but how did you guys bruteforce it fast i mean there are a few users and what wordlist did you use?
Reply
Banned

Posts: 31
Threads: 0
Joined: Jul 2024
Reputation: 0

#26
11-15-2024, 11:14 AM
Thanks dude, i am ready to pwn this box
Ban reason: Leeching | http://breachddyfwvcp4kzccos5oxtdbssmfbp...an-Appeals if you feel this is incorrect. (Permanent)
Reply
RaidForums
Member
Posts: 6
Threads: 0
Joined: Sep 2023
Reputation: 0

#27
11-15-2024, 02:08 PM (This post was last modified: 11-15-2024, 02:12 PM by id2746.)
how to brut Backup.psafe3?
i use pwsafe2john to пet hash (Backu:$pwsafe$*3*4ff588b74906263ad2abba592aba35d58bcd3a57e307bf79c8479dec6b3149aa*2048*1a941c10167252410ae04b7b43753aaedb4ec63e3f18c646bb084ec4f0944050)
but cant crack it

used hascat -m9000 (-m5200 isnt working for me)
but have not results
Reply
RaidForums
Member
Posts: 6
Threads: 0
Joined: Sep 2023
Reputation: 0

#28
11-16-2024, 10:35 AM
блять ну ёбанарот, помогите разобраццо!!!
Reply
Banned

Posts: 24
Threads: 0
Joined: Nov 2024
Reputation: 0

#29
11-17-2024, 06:39 PM (This post was last modified: 11-17-2024, 06:45 PM by wizarddos.)
(11-15-2024, 02:08 PM)id2746 Wrote: how to brut Backup.psafe3?
i use pwsafe2john to пet hash (Backu:$pwsafe$*3*4ff588b74906263ad2abba592aba35d58bcd3a57e307bf79c8479dec6b3149aa*2048*1a941c10167252410ae04b7b43753aaedb4ec63e3f18c646bb084ec4f0944050)
but cant crack it

used hascat -m9000 (-m5200 isnt working for me)
but have not results

This command worked for me

hashcat -m 5200 Backup.psafe3 -a 0 /usr/share/wordlists/rockyou.txt
(11-16-2024, 10:35 AM)id2746 Wrote: блять ну ёбанарот, помогите разобраццо!!!

 как мы можем вам помоц?
Ban reason: Leeching | http://breachddyfwvcp4kzccos5oxtdbssmfbp...an-Appeals if you feel this is incorrect. (Permanent)
Reply
RaidForums
Member
Posts: 6
Threads: 0
Joined: Sep 2023
Reputation: 0

#30
11-19-2024, 12:15 PM
(11-17-2024, 06:39 PM)wizarddos Wrote:
(11-15-2024, 02:08 PM)id2746 Wrote: how to brut Backup.psafe3?
i use pwsafe2john to пet hash (Backu:$pwsafe$*3*4ff588b74906263ad2abba592aba35d58bcd3a57e307bf79c8479dec6b3149aa*2048*1a941c10167252410ae04b7b43753aaedb4ec63e3f18c646bb084ec4f0944050)
but cant crack it

used hascat -m9000 (-m5200 isnt working for me)
but have not results

This command worked for me

hashcat -m 5200 Backup.psafe3 -a 0 /usr/share/wordlists/rockyou.txt
(11-16-2024, 10:35 AM)id2746 Wrote: блять ну ёбанарот, помогите разобраццо!!!

 как мы можем вам помоц?

))
а хэш снимал pwsafe2john?

такое чувство, что хэш битый...

В любом случае, спасибо за ответ!
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  HTB - VOLEUR.HTB - MEDIUM WINDOWS chain 1 120 02-09-2026, 07:07 PM
Last Post: 403Forbidden
  HTB - CERTIFICATE.HTB - HARD WINDOWS chain 0 113 02-09-2026, 04:49 PM
Last Post: chain
  Haze - Hack The Box Season 7 - Windows Hard ShitWhiffler 70 9,586 04-07-2025, 11:13 PM
Last Post: inferno7us
  ALL Active Windows Machine HACKTHEBOX easy ROOT include University Mas_PangaREP 5 1,516 04-07-2025, 07:49 AM
Last Post: Cyphersy
  FREE WRITEUP: HTB Cat | Medium Linux NekoElf 0 385 04-04-2025, 09:40 PM
Last Post: NekoElf



 Users browsing this thread: 1 Guest(s)