TryHackMe! Relevant - Exploiting SMB(samba) without Metasploit // walk- through

00:00-Disclaimer

This is educational purpose video only. I did not harm anyone I just do ctfs and make that walkthrough and explain what of the method here in use, so please don't use this because hacking is crime if you do this then it's can land you in jail.
I'm not support any kind of illegal or malicious hacking.

Relevant
Penetration Testing Challenge

You have been assigned to a client that wants a penetration test conducted on an environment due to be released to production in seven days.

Scope of Work

The client requests that an engineer conducts an assessment of the provided virtual environment. The client has asked that minimal information be provided about the assessment, wanting the engagement conducted from the eyes of a malicious actor (black box penetration test). The client has asked that you secure two flags (no location provided) as proof of exploitation:

User.txt
Root.txt
Additionally, the client has provided the following scope allowances:

Any tools or techniques are permitted in this engagement, however we ask that you attempt manual exploitation first
Locate and note all vulnerabilities found
Submit the flags discovered to the dashboard
Only the IP address assigned to your machine is in scope
Find and report ALL vulnerabilities (yes, there is more than one path to root)
(Roleplay off)

I encourage you to approach this challenge as an actual penetration test. Consider writing a report, to include an executive summary, vulnerability and exploitation assessment, and remediation suggestions, as this will benefit you in preparation for the eLearnSecurity Certified Professional Penetration Tester or career as a penetration tester in the field.


00:05-intro
00:47-nmap scan to check ports
02:37-smb enumeration
04:50-decode base64 encoded text
06:45-try to enumerate rpc
08:58-looking a suspicious port
09:42-run gobuster to check hidden directories on this port
11:42-let's check smb putting our file in server or not !
13:22-generate windows reverse shell file
15:16-put file in server through smb and get reverse shell
16:31-looking user.txt
18:30-download printspoofer.exe for privilege escalation
21:06-run printspoofer.exe file to get admin access
23:06-looking root.txt


-------------------------------
#yesspider

please support me on patreon
https://www.patreon.com/yesspider

https://github.com/yesspider-hacker

https://twitter.com/yesspider1

--------------------------------------------------