- Published on
Early Situational Awareness allows us to move laterally between different users with common DACLs misconfigurations and using the compromised users credentials to discover a Password Database file that is crackable in the FTP port that leads to user access. For root access, more common DACLs were found that lead us to perform DCSync on the domain. Thus, gaining DA