Tasks
Tasks for the specified attack path
Enumerate valid domain users.
Check if any of the valid users are vulnerable to a kerberos vulnerability.
Check if the user can access any system or service.
Escalate privileges to sysadmin.
Get a shell.
Escalate privileges on the machine with a delegation attack.
Enumerate SQL Links to hop across trusts.
Perform a UNC Path injection and capture the hash of SQL Service user.
Crack the hash of the SQL service user.
Check for ACL's and get access to the system.
Look for saved credentials on the machine (DPAPI).
Become domain admin by abusing the "Backup Operators" group.
Check for interesting user attributes across the trust to
bank.local.Take over the
bank.localforest.
Last updated