Tuesday TOOLSday: Ninja Hacker Academy - Part 7

Hi friends! In this week’s Tuesday TOOLSday we made some big steps forward in pwning Ninja Hacker Academy (NHA):

• Leverage the hash of a gMSA to “ForceChangePassword” on an important account

• Use the compromised important account to add ourselves to the Domain Admins group(!)

• DO THE DOMAIN ADMIN DANCE!

So we’ve pwned ACADEMY.NINJA.LAN (we rule!). All that’s left is to somehow leverage that to pwn NINJA.HACK domain! Join us next week for the thrilling conclusion!