7MS #638: Tales of Pentest Pwnage – Part 61

7MS #638: Tales of Pentest Pwnage – Part 61

Today we're talking pentesting – specifically some mini gems that can help you escalate local/domain/SQL privileges:

  • Check the C: drive! If you get local admin and the system itself looks boring, check root of C – might have some interesting scripts or folders with tools that have creds in them.
  • Also look at Look at Get-ScheduledTasks
  • Find ids and passwords easily in Snaffler output with this Snaffler cleaner script
  • There's a ton of gold to (potentially) be found in SQL servers – check out my notes on using PowerUpSQL to find misconfigs and agent jobs you might able to abuse!

Jaksot(711)

Suosittua kategoriassa Politiikka ja uutiset

aikalisa
ootsa-kuullut-tasta-2
tervo-halme
rss-ootsa-kuullut-tasta
politiikan-puskaradio
rss-vaalirankkurit-podcast
viisupodi
rss-podme-livebox
rss-asiastudio
otetaan-yhdet
et-sa-noin-voi-sanoo-esittaa
the-ulkopolitist
rss-tasta-on-kyse-ivan-puopolo-verkkouutiset
rss-kaikki-uusiksi
rss-hyvaa-huomenta-bryssel
radio-antro
rss-kiina-ilmiot
rss-kovin-paikka
rss-polikulaari-pitka-kiekko-ja-muut-ts-podcastit
rss-vain-talouselamaa