0:00
/
0:00
Transcript

Tuesday TOOLSday: coercing SMB auth w/scheduled tasks

Didn't lead to domain admin, but I'll still take it!

Today I demonstrate a method to leverage local admin access to coerce SMB auth out of that system, on behalf of a higher-privilege user, and “catch” the request with downgraded authentication you can crack using something like Vast.ai.

Enjoy!

Leave a comment

Brian

Get more from Brian Johnson in the Substack app
Available for iOS and Android

Discussion about this video

User's avatar