Blackfield Write-Up by T13nn3s

Hey, Nice writeup. How did you find that user ‘support’ has ‘Password changing’ privileges over the user ‘audit2020’?

Rpcclient ‘enumprivs’ doesn’t show the exact privileges. I found it only by running Bloodhound on it.