Currently working on priv escalating on Saunna, Got svc_loanmanager cred's. Trying to grab the hash with the secretsdump.py. I keep getting errors? Could use a nudge. Thank you for your help. First windows box. It's been a struggle.
hey buddy, i need help with traceback. i'm in with the shell as webadmin.
did sudo -l to get luvit. priv_esc.lua gives hint to create a private key .. i did but it's not working. i cant access using ssh. please help
I working on Sauna windows machine. I found some existing users by using kerberos enumeration. I got the hash with GetNPUsers.py and cracked it. I know the all usernames (Administrator, Guest, krbtgt, HSmith, FSmith with password, svc_loanmgr)
I checked the SMB file shares but I couldn't find any useful data at there.
what is the next 2 steps?