Dancing Writeup - HackTheBox
Exploit an open SMB share on a Windows machine using smbclient to enumerate shares and retrieve the hidden flag without credentials.
HackIndex.io
Language
Showing 1–4 of 4
Exploit an open SMB share on a Windows machine using smbclient to enumerate shares and retrieve the hidden flag without credentials.
SMB enumeration reveals credentials and DNS zones. Exploiting LFI with PHP injection leads to a shell, then Python library hijacking for root.
Exploit second-order SQLi to steal credentials, abuse a SMB share to upload a PHP webshell, then escape WSL to escalate to SYSTEM.
Active Directory exploitation via AS-REP roasting, SMB enumeration, BloodHound analysis, ForceChangePassword abuse, and SeBackupPrivilege for NTDS.dit extraction.
Other platforms
We use cookies to improve your browsing experience, analyze site traffic, and personalize content. By clicking "Accept All", you consent to our use of cookies. Privacy Policy.