diff --git a/Vulnlab/Retro.md b/Vulnlab/Retro.md index a5ebe03..93607e9 100644 --- a/Vulnlab/Retro.md +++ b/Vulnlab/Retro.md @@ -133,6 +133,7 @@ certipy auth -pfx 'administrator.pfx' -username 'administrator' -domain 'retro.v Through `evil-winrm` we can login on WinRM using the NThash of administrator + ## References - https://www.trustedsec.com/blog/diving-into-pre-created-computer-accounts/