Type your comment> @dm7500 said:
So far, I’ve found the ‘r********’ user creds via the E**** macro file. It works as a windows login for SMB shares, but I’m kind of stuck beyond that. I’m trying to use the tools in I******t to enumerate or find something new, but no luck so far.
I’ve read up on the retired G**** box, so I get how to grab the N*** hash, but I don’t see a way to make the server connect back to my share, as I don’t see a place to S**i
Any hints as to the next step?
Same boat…