❌

Reading view

There are new articles available, click to refresh the page.

Britain to build sub-hunting sensors for AUKUS underwater drones

Britain will lead development of three new sensor and effects packages for underwater drones under the AUKUS security partnership with the United States and Australia, with the systems due to be available across all three nations’ uncrewed underwater fleets from 2027, the UK Ministry of Defence said on Oct. 27. The three payloads are a […]

U.S., UK and Australia test Saronic drone boats together

Saronic Technologies’ Corsair drone boats, the same type the U.S. military used to strike an Iranian naval base in July, have operated alongside forces from the United States, the United Kingdom and Australia at Maritime Big Play Pacific, the AUKUS partners’ largest demonstration of uncrewed and autonomous technology, held in San Diego this October. The […]

U.S. Navy nuclear submarine arrives in Australia for maintenance

The U.S. Navy attack submarine USS Colorado (SSN 788) arrived at HMAS Stirling in Western Australia on Oct. 27 to begin a scheduled monthlong maintenance period. For the first time, Australian civilian technicians will carry out routine maintenance on a Virginia-class submarine in Western Australia, working alongside American shipyard specialists, with the U.K. Royal Navy […]

4 captivating Paramount+ movies to watch this week (October 26-November 1)

Paramount has been one of the biggest names in the movie industry for a long time, and they have utilized that legacy to give us a strong streaming service with a pretty vast library. What I find so appealing about their platform is their catalog of movies, with hits from just about every era and genre ready to satisfy whatever craving I happen to have each week.

3 sinister Paramount+ thrillers to watch this weekend (October 23-25)

We're getting closer to Halloween by the day, and it is the perfect time for some content that will bring the thrills. While horror movies are great, some people prefer something a little more psychological, which is where the picks on this list come in. They might not feature the supernatural, but they will still haunt you long after you've switched off your TV.

Hack The Box: Checkpoint Machine Walkthrough Medium Difficulty

Just finished the Checkpoint machine on Hack The Box (Medium difficulty) and it was a really enjoyable Active Directory box with some modern and creative attack paths.

I started with the provided credentials for `alex.turner`. After some enumeration I discovered that a previously deleted account (`mark.davies`) could be restored and that this account had write access to a share called DevDrop. This share was used by the organisation to stage VS Code extensions.

By creating a malicious VSIX extension targeting VS Code engine version 1.118.0 and dropping it on the share, a scheduled task automatically installed the extension and gave me a reverse shell as `ryan.brooks`. This was a really clean example of abusing enterprise software deployment processes.

From the `ryan.brooks` foothold I used Rubeus to obtain a TGT, then leveraged bloodyAD to create a malicious dMSA under a writable OU and impersonated a higher-privileged account. This eventually granted access to a VMBackups share containing a Windows Server memory dump. Using Volatility I extracted the local Administrator NTLM hash from the dump, authenticated with Evil-WinRM, and captured the root flag.

Overall, Checkpoint does a great job of chaining together several current techniques: writable shares for extension abuse, deleted object restoration, dMSA abuse, and memory forensics. It’s a solid Medium box that feels realistic and rewards careful enumeration.

Would recommend it to anyone working on modern Windows / Active Directory attack paths.

#HackTheBox #CyberSecurity #PenetrationTesting #ActiveDirectory #RedTeam #HTB #InfoSec #WindowsSecurity #PrivilegeEscalation #Kerberos #MemoryForensics …

Learn MoreHack The Box: Checkpoint Machine Walkthrough Medium Difficulty

The post Hack The Box: Checkpoint Machine Walkthrough Medium Difficulty appeared first on Threatninja.net.

❌