TD Cyber Labs

Cyber LabsBY TUTORIALS DOJO

Labs Tool Trainers Learning Paths Docs

No sign-in required

BackCyber Labs / SMB Enumeration to Cracked Credentials Simulated 0 / 100 pts

SMB Enumeration to Cracked Credentials

A Windows server allows a null session. Enumerate its shares, crack the administrator hash you dumped earlier, and validate the credential across the host with NetExec.

Available tools: enum4linux · smbmap · smbclient · netexec · hashcat · hashid
Target: dc01.corp.local (10.10.10.60)

✓

Enumerate with a null session — name the non-default file share

25 pts

A null session lists the shares. Ignore IPC$ and ADMIN$.

✓

Crack the administrator NTLM hash in hashes.txt (hashcat -m 1000). What is the password?

35 pts

Mode 1000 is NTLM. Feed it the wordlist.

✓

Validate the admin credential on the host with NetExec (aim for Pwn3d!)

40 ptsDone in the terminal

Applications

target 10.10.10.60--:--

learner@kali: ~ — Terminal

Congratulations!

You completed SMB Enumeration to Cracked Credentials.

Points: 0 / 100
Tasks solved: 0 / 3