Credentials / Notes / LL
Finally got to use noPac... sick exploit
Thought of enumerating for it after seeing SeMachineAccountPrivilege in my whoami /priv output
If theres no clues on the box and it's AD, probably something AD specific for priv esc
Use all of the netexec modules as well, very helpful
Last updated