Sizzle 169
RETIRED MACHINE
Windows
Insane
Sizzle
Windows
Insane
4.9
MACHINE RATING2255
USER OWNS2288
SYSTEM OWNS12/01/2019
RELEASEDMachine Synopsis
Sizzle is an "Insane" difficulty WIndows box with an Active Directory environment. A writable directory in an SMB share allows to steal NTLM hashes which can be cracked to access the Certificate Services Portal. A self signed certificate can be created using the CA and used for PSRemoting. A SPN associated with a user allows a kerberoast attack on the box. The user is found to have Replication rights which can be abused to get Administrator hashes via DCSync.
Machine Matrix