7MS #689: Pwning Ninja Hacker Academy – Part 2
7 Minute Security · Brian Johnson
August 22, 202515m 40s
Audio is streamed directly from the publisher (traffic.libsyn.com) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
Hello friends! Today your friend and mine, Joe "The Machine" Skeen joins me as we keep chipping away at pwning Ninja Hacker Academy! Today's pwnage includes:
- "Upgrading" our Sliver C2 connection to a full system shell using PrintSpoofer!
- Abusing nanodump to do an lsass minidump….and find our first cred.
- Analyzing BloodHound data to find (and own) excessive permissions against Active Directory objects