TRYHACKME'S ADVENT OF CYBER 2023 ( DAY 23 )

 

Day 23 - "Relay All the Way"

The learning objectives for day 23 were:

• The basics of network file shares
• Understanding NTLM authentication
• How NTLM authentication coercion attacks work
• How Responder works for authentication coercion attacks
• Forcing authentication coercion using lnk files

In this task we learned about what NTLM authentication is, how the coercion attacks work, and how to perform this attack.

First we created a lnk file and uploaded it, opened up our responder and waited for an interaction , once we received the hash we used john the ripper tool to crack the hash.

Click here to see the tutorial.