In a writeup, there is a Lateral Movement section that says - “The password Sheffield19 found
in the previous can be used to switch to the mike .”
But the deal is that we didn’t find it previously and I don’t know to be honest how did the writer just skip this step and where he found a user password?
Thank you
@purplebyteone said:
In a writeup, there is a Lateral Movement section that says - “The password Sheffield19 found
in the previous can be used to switch to the mike .”But the deal is that we didn’t find it previously and I don’t know to be honest how did the writer just skip this step and where he found a user password?
Thank you
This is in the write up for Pathfinder, which is the previous lab.
We obtain the TGT ticket for the svc_bes and save it to a file called hash. We can use Hashcat or JTR in conjunction with rockyou.txt to obtain the plaintext password Sheffield19.