Red Teaming Active Directory Lab #2 Task 2 Constrained Delegation

Cyber Security Advanced Web Application Penetration Testing
, ,
1

I am working on Constrained Delegation part of the lab and I have used rubeus to create the service ticket for http on dev01 with this command:

image
image1462×468 62.2 KB

This is asinine that I can only embed one image at a time I will reply with the rest I guess

2

When I check to see if the ticked is imported it is indeed listed:

image
image694×368 30.1 KB

3

When I try to interact with DEV01 using ps remoting I get this error:

image
image1490×322 59.5 KB

4

Can you try without username and password flags?

5

yeah I did that. I also just ran invoke-command -computername dev01 -scriptblock{hostname} with the same error.

I also tried switching to CIFS too and just ran shellcmd to run dir on C$ with access denied. I think I may be on to something. I am going to do do some testing tonight or tomorrow to figure out if my theory is right or not.

6

figured this out on my own. Pay close attention to how you request your ticket. if you use the FQDN then make sure you reference the the host by the FQDN when trying to access the service.

1 Like