SAM_I_AM

Forensics weight 68.04 No technique tags yet.

Difficulty Not rated yet

♡ 0

Author: TurboPenguin

Flag format: DUCTF{...}

The attacker managed to gain Domain Admin on our rebels Domain Controller! Looks like they managed to log on with an account using WMI and dumped some files.

Can you reproduce how they got the Administrator's Password with the artifacts provided?

Place the Administrator Account's Password in DUCTF{}, e.g. DUCTF{password123!}

Author: TurboPenguin

Writeups

Official

No official writeup linked.

Community

No community writeups yet. Solved it? Share how.