Hey, Nice writeup. How did you find that user ‘support’ has ‘Password changing’ privileges over the user ‘audit2020’?
Rpcclient ‘enumprivs’ doesn’t show the exact privileges. I found it only by running Bloodhound on it.
Hey, Nice writeup. How did you find that user ‘support’ has ‘Password changing’ privileges over the user ‘audit2020’?
Rpcclient ‘enumprivs’ doesn’t show the exact privileges. I found it only by running Bloodhound on it.