AesirSec
  • 🏡Home
  • 📚Blog
    • Radio Silence
    • OSCP Strategy
    • Plan for 2023
    • PNPT
    • Plan for 2022
    • eJPT
  • ❓Enumeration
  • 🐧Linux
    • Commands
    • Restricted Shell Bypassing
    • Stabilize Shell
  • 🪟Windows
    • Commands
    • Transferring Files
  • 📕Active Directory
    • Enumeration
    • Attacking AD Initial Vectors
    • Ipv6 attacks
    • Post Compromise Enum
    • Strategy
  • #️Privilege Escalation
    • 🐳Docker
    • 🐧Linux
    • 🪟Windows
  • 🕸️Web Apps
    • LFI
    • Apache
    • CSRF
    • PHP
    • XSS
    • SQLi
    • Pay Loads All The Things
  • 👾Buffer Overflows
  • 💻Programming
    • 🐍Python
  • 👨‍💻Ports/Technologies
    • FTP - Port 21
    • SSH - Port 22
    • Telnet - Port 23
    • DNS - 53
    • HTTP/S - 80/443
    • RPC - 135
    • SMB - 139/445
    • LDAP - 389/636
    • SQL - Port 3306
    • Docker
    • IIS
  • 🛠️Tools
    • ffuf
    • wwwtree
    • Rogue LDAP Servers
    • Wpscan
    • crackmapexec
    • msfvenom
    • John the Ripper
    • Hydra
  • 🐬Flipper Zero/ Radio Frequency
  • 🗃️Boxes/Write Ups
    • Template
    • 🐉Game Of Active Directory v2 - Day 1
    • Proving Grounds
      • Proving Grounds Practice
        • 📚Heist
        • 📚Hutch
        • 🪟Internal
        • 🪟Shenzi
        • 🪟Jacko
        • 🪟DVR4 - qued
        • 🪟Nickel
        • 🪟Slort
        • 🐧Walla
        • 🐧Snookums
        • 🐧Exfiltrated
        • 🐧Wheels
        • 🐧ClamAV
        • 🪟Squid
        • 🪟Algernon
        • 🪟Helpdesk
      • Proving Grounds Play
        • 🪟Sams
        • 🐧Assertion101
        • 🐧DriftingBlues6
        • 🐧DC-2 - unfinished
        • 🐧InfoSecPrep
        • 🐧Stapler
        • 🐧BBSCute
        • 🐧SoSimple
        • 🐧Solstice
        • 🐧FunBoxEasyEnum
        • 🐧Sumo
        • 🐧FunBoxRookie
        • 🐧MoneyBox
        • 🐧CyberSploit1
        • 🐧Wpawn
        • 🐧Dawn
        • 🐧Pwned1
        • 🐧FunBoxEasy
        • 🐧DC-1
    • TryHackMe
      • 🪟Anthem
  • 🔗Helpful Links
  • 🧙whoami
  • 🏴‍☠️Github
  • 📡Discord
  • 🐦Twitter
Powered by GitBook
On this page

Was this helpful?

  1. Boxes/Write Ups

Game Of Active Directory v2 - Day 1

Started 3/23/23

PreviousTemplateNextProving Grounds

Last updated 2 years ago

Was this helpful?

Setting this up was a PAIN! But worth it for the practice. Setup: Also forwarded all traffic through my Ubuntu VM and added custom routes to the routing tables so I wouldn't have to forward via SSH and use proxychains. Now see that I can reach each machine.

Was able to crack one of the hashes.

Immediately tried spraying the found credentials at other machines on the subnet.

Found that I could log into 192.168.56.11 with these credentials. So I ran secretsdump.py against it.

Grabbed all the hashes that were dumped and ran them against John.

Have not had to look at any kind of walkthrough or get any hints yet. To be continued...

🗃️
🐉
https://github.com/quincyntuli/GOAD-v2-Installation-Notes
https://github.com/Orange-Cyberdefense/GOAD