Comments (4)
Apparently https://github.com/CCob/lsarelayx is even easier, as it's a standalone executable and doesn't need a "real" C2 like Cobalt Strike to run it.
from lplite.
The lsarelayx looks awesome but it also seems like it has to be used in combo with ntlmrelayx - and I don't know if ntlmrelayx plays nice in Windows. I'll have to try that.
from lplite.
As an alternative, this standalone version of impacket binaries looked promising (https://github.com/ropnop/impacket_static_binaries) but I hit some issues at runtime (ropnop/impacket_static_binaries#8).
Thinking out loud, I could have the dbadmin account have a slightly more crackable password and have folks get DA that way, but I'd REALLY like to PTH as that's more fun since students will have already done a few cracking exercises by the time they get to this point.
from lplite.
The section "relaying hashes from SQL" is now fully baked - both from a testing it out in real time perspective, as well as a curriculum perspective!
from lplite.
Related Issues (20)
- relatively small issue but multiple choice quiz doesn't allow multiple answers HOT 1
- Need clearer instructions to say to do privesc HOT 1
- Two Tiny Typos HOT 1
- Explanation of how we got the password for password spraying HOT 1
- Minor continuity error in Enter-PSSession command HOT 1
- Typo! HOT 1
- How did we know about this password? HOT 1
- Null session weakness and fix
- Create PowerShell script to disable all GPOs except for one particular student HOT 1
- Change hashcat wiki link
- Insert link to SecLists and duplicut
- Create "day 0" captcha to continue course
- Create a defensive blue team version of LPLITE
- Get ldapfw working in the lab
- Get Windows licenses migrated to new environment
- Put GitHub link in the Teachable curriculum
- Fix GPO UNC path script
- PowerShell snippet to dump ALL fields out of Active Directory users
- Add PowerShell "-force" to PowerUpSQL section
- Fix CME "smb-signing.txt"
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from lplite.