Red-teaming Active Directory Lab #1 (Covenant C2 vs ELS.LOCAL)

Cyber Security Advanced Penetration Testing
, ,
1

Red-teaming Active Directory Lab #1 (Covenant C2 vs ELS.LOCAL)

I can’t do the CLM Bypass presented in the Lab.

I have downloaded the PowerShdll but when trying to run it using rundll32, i get an error saying that it is blocked as per group policy rules.

Do i need administrator privileges to bypass the CLM? i don’t see anything in the Lab Walkthrough.

Thank you.

2

hey I had a similar error. try this

C:\Users\victim.ELS-CHILD\Desktop>c:\Windows\System32\rundll32.exe ps.dll,main -i

NOTE: there is a hung session after the above command. ctrl + x to ‘clear’ error

then try the download cradle etc

1 Like
3

Yes. It worked. Thank you!

1 Like