Hackthebox Querier Speedrun

Summary

00:09 - Port Scan 00:37 - SMB Null Session Pillage 01:00 - MS SQL Credential Retrieval From Excel Report 01:35 - Starting Fake ... unauthorized smb share - credentials in VBA script - xp_dirtree / cracking NTLM hash - administrator password in cached Group ... This walk-through is for hacking the All my videos are for educational purposes with bug bounty hunters and penetration testers in mind YouTube don't take down my ... Exploiting a SQL Server instance using the xp_dirtree command to capture a Net-NTLMv2 hash via SMB authentication. 00:50 - Begin of Reocn 03:30 - Using SMBMap to enumerate fileshares 05:45 - Discovering an Excel Macro File 09:25 - Using ... password: github.com/FASTO96/password-cracking/blob/master/ 00:00 - Introduction 00:50 - Start of nmap 03:55 - We can enumerate valid usernames based upon time 07:00 - Enumerating ... Tools: Nmap, Metasploitable, Jenkins, Data Stream, KeePass Abusing Jenkins to get the foothold and Impersonation to get ... 00:00 - Port Scan 00:30 - UnrealIRCd Exploit 00:59 - SUID Binary Analysis 01:41 - Privilege Escalation Thank you for watching!