Tag: mssql

• Mantis – HackTheBox

  Mantis was a hard machine that focused on good enumeration and discovering an older vulnerability in the way kerberos authenticates regular users. We’ll first discover a mssql credentials, access the mssql server, and extract a domain user’s credentials. From there we will find the version of Windows Server is vulnerable to MS14-068 which allows for…

  Captain Nemo

  July 26, 2022

  HackTheBox

  Active Directory, golden ticket, Kerberos, MS14-068, mssql, plaintext credentials