TryHackMe - Active Directory Basics - Walkthrough

Introduction

Today we're going to be doing a walkthrough for the Active Directory Basics room hosted at https://tryhackme.com/room/activedirectorybasics . We'll be using one virtual machine (VM), the the deployed Windows 10 client.

Task 1 - Introduction

Questions

I understand what Active Directory is and why it is used.

No answer needed

Task 2 - Physical Active Directory

Questions

What database does the AD DS contain?

Answer contained within Task description

Where is the NTDS.dit stored?

Answer contained within Task description

What type of machine can be a domain controller?

Answer contained within Task description

Task 3 - The Forest

Questions

What is the term for a hierarchy of domains in a network?

Answer contained within Task description

What is the term for the rules for object creation?

Answer contained within Task description

What is the term for containers for groups, computers, users, printers, and other OUs?

Answer contained within Task description

Task 4 - Users + Groups

Questions

Which type of groups specify user permissions?

Answer contained within Task description

Which group contains all workstations and servers joined to the domain?

Answer contained within Task description

Which group can publish certificates to the directory?

Answer contained within Task description

Which user can make changes to a local machine but not to a domain controller?

Answer contained within Task description

Which group has their passwords replicated to read-only domain controllers?

Answer contained within Task description

Task 5 - Trusts + Policies

Questions

What type of trust flows from a trusting domain to a trusted domain?

Answer contained within Task description

What type of trusts expands to include other trusted domains?

Answer contained within Task description

Task 6 - Active Directory Domain Services + Authentication

Questions

What type of authentication uses tickets?

Answer contained within Task description

What domain service can create, validate, and revoke public key certificates?

Answer contained within Task description

Task 7- AD in the Cloud

Questions

What is the Azure AD equivalent of LDAP?

Answer contained within Task description

What is the Azure AD equivalent of Domains and Forests?

Answer contained within Task description

What is the Windows Server AD equivalent of Guests?

Answer contained within Task description

Task 8 - Hands-On Lab

Questions

What is the name of the Windows 10 operating system?

Click the Start Button in lower-left corner of Desktop, then click on the PowerShell icon 


cd Downloads
powershell -ep bypass
. .\PowerView.ps1


Get-NetComputer -fulldata | select operatingsystem


What is the second "Admin" name?

Get-NetUser | select cn | Select-String -Pattern “admin”


     Which group has a capital "V" in the group name?

Get-NetGroup | Select-String -CaseSensitive -Pattern “V”


When was the password last set for the SQLService user?

get-netuser | select-object -property cn,pwdlastset | select-string “SQL”
manually convert to 12 hr format


Task 9 - Conclusion

Questions

I understand the basics of Active Directory

No answer needed

Finish






Comments

Post a Comment

Popular posts from this blog

TryHackMe - Windows PrivEsc - Walkthrough

Image
Introduction Today we're going to be doing a walkthrough for the Windows PrivEsc room hosted at https://tryhackme.com/room/w indows10privesc . For this walkthrough, we'll be using two virtual machines (VMs), a Kali Linux VM as our attacking machine, and the deployed Windows 10 client as the the victim machine. Task 1 - Deploy the Vulnerable Windows VM Press the green button here: The Windows machine should come online after a minute or two. The IP address of the machine can be found here: Of course, the actual IP address will probably be a different one from the one in the screenshot.  For the examples, however, we will use the IP address of 10.10.227.113 RDP should be available on port 3389 (it may take a few minutes for the service to start). You can login to the "user" account using the password "password321": xfreerdp /u:user /p:password321 /cert:ignore /v:10.10.227.113 Questions: Deploy the Windows VM and login using the "user" ...
Read more

TryHackMe - Reversing Elf - Walkthrough

Image
Introduction Today we're going to be doing a walkthrough for the Reversing ELF room hosted at https://tryhackme.com/room/ reverselfiles . For this walkthrough, we'll be using one virtual machine (VMs), a Kali Linux VM as our attacking machine. Task 1 - Crackme1 Questions What is the flag? Download the Task 1 Task File Copy it to your working directory Give the file executable permissions Run the file chmod +x crackme1 ./crackme1 Task 2 - Crackme2 Questions What is the super secret password ? Give the file executable permissions Run Ltrace on the file with a test string chmod +x crackme2 ltrace ./crackme2 test ./crackme2 passwordFoundInPreviousStep Task 3 - Crackme3 Questions What is the flag? Give the file executable permissions Run strings on the file Echo the base64 string you found, pipe it into Base64 decode chmod +x crackme3 strings crackme3 echo “ base64stringFoundInPreviousStep ” | base64 -d Task 4 - Crackme4 Questions What is the password ? Give the file execu...
Read more

TryHackMe - XSS - Walkthrough

Image
Introduction Today we're going to be doing a walkthrough for the XSS room hosted at https://tryhackme.com/room/ xss . For this walkthrough, we'll be using two virtual machines (VMs), the TryHackMe AttackBox VM as our attacking machine, and the deployed XSS vulnerable web client as the the victim machine. Task 1 - Introduction Questions: Read the introduction. No answer needed Task 2 - Deploy your XSS Playground Questions Deploy the machine and navigate to http://<ip> No answer needed Task 3 - Stored XSS Questions The machine you deployed earlier will guide you though exploiting some cool vulnerabilities, stored XSS has to offer. There are hints for answering these questions on the machine. No answer needed Add a comment and see if you can insert some of your own HTML. Doing so will reveal the answer to this question. Register for the web-app with the following parameters Username: test Password: test Click the Register button  Click the “hamburger menu” button Click the ...
Read more