LIMB
This is the scenario, we managed to compromise a Windows host, we listed the network interfaces and possible routes for attack, nothing was found, the computer is connected via ethernet, but we noticed that on this computer there is a wifi interface, what to do is list all the WiFi networks that the computer has already connected to.
8 wifi networks were found, the computer registered these access points during connection, we selected the SSID of the "Visitors" network and authenticated. We increase the attack surface with access to another network
During the pentest, all possibilities of compromise are valid, now we dump the passwords for all WiFi networks that the computer previously connected to and save them for a future password spraying attack.
we dump wifi passwords in the C:\Users\Public\images directory
Passwords are saved in an xml file that can be read in plain text
Wi-Fi interfaces are commonly found on workstations; we use them to connect to other networks within range.
netsh wlan show profilesНе удалось прогрузить медиа
8 wifi networks were found, the computer registered these access points during connection, we selected the SSID of the "Visitors" network and authenticated. We increase the attack surface with access to another network
netsh wlan connect ssid="Visitante" name="Visistante"During the pentest, all possibilities of compromise are valid, now we dump the passwords for all WiFi networks that the computer previously connected to and save them for a future password spraying attack.
we dump wifi passwords in the C:\Users\Public\images directory
netsh wlan export profile key=clear folder="C:\Users\Public\images"Не удалось прогрузить медиа
Passwords are saved in an xml file that can be read in plain text
Не удалось прогрузить медиа
Wi-Fi interfaces are commonly found on workstations; we use them to connect to other networks within range.
👍45
🤔9
😢9
💯9