VulNyx: Hosting - Windows OS - Backup Operators Hacking
0:00 Start
1:20 Initial scans
4:03 Webserver enumeration
8:45 User discovery and SMB brute forcing
15:19 User enumeration through SMB
20:56 WinRM access
23:25 Initial access
26:04 Privilege Escalation - SeBackupPrivilege
32:11 Privilege Escalation - Admin Pass The Hash Attack
37:48 We are Admin
38:15 Wrap-up
You can download the challenge VM from the following link:
https://vulnyx.com/#hosting
Download the file, then unzip the file and deploy the VM using VirtualBox or VMware. You will also need to have an "attacker" VM with security tools installed on it, e.g., Kali Linux, deployed to the same VM network.
The following links are related to topics covered in this challenge:
HackTricks SeBackupPrivilege Article:
https://book.hacktricks.wiki/en/windo...
Evil-Winrm Github Repo:
https://github.com/Hackplayers/evil-w...
Join this channel to get access to perks:
/ @theshyhat
Donations:
https://streamlabs.com/theshyhat/tip
Donations are always appreciated, but never required! All donations will go towards developing new HackerFrogs courses and cybersecurity video content!
HackerFrogs Links:
Twitch:
/ theshyhat
Kick:
https://kick.com/theshyhat
Reddit:
/ hackerfrogs