RED TEAM OPS // PHASE 07
Lateral Movement
Pivot from WIN01 to FS01 using stolen credentials or ticket material. Do not touch DC01 yet.
Objectives
- 01Crack the Kerberoasted svc_web hash offline.
- 02Authenticate to FS01 with the recovered credential.
- 03Extract a target file from the Finance share.
ATT&CK techniques
T1021.002T1550.002T1075
Operator Checklist
operator@linux01 ~ /ops/lateral
[*] hashcat: cracked 1/1 -> Winter2024!
[*] Impacket SMBExec v0.11 - Copyright 2023 Fortra
[!] Launching semi-interactive shell
C:\Windows\system32>
$