After finally cracking one we quickly found out this place was very locked down. They were unaware of mimt6 and that’s how we started getting some hashes rolling in.
They fixed absolutely everything from the report last year. I was on-site at a client and these guys were good. TeamViewer also lets you copy data or schedule tasks to run through their Service, which runs as NT AUTHORITY\SYSTEM, so a low privilege user can immediately go to SYSTEM with a.
If you do not have RDP rights to machine but TeamViewer is installed, you can use TeamViewer to remote in. If the password is reused anywhere, privilege escalation is possible. This was a crazy ride and I learned a ton along the way.
Oh man where to even begin with this one.
0 kommentar(er)
