InfoSec LAB

Cicada_Automated

Created: 1 min read

PEAS

Conducting an automated enumeration after performing a basic system enumeration

*Evil-WinRM* PS C:\tmp> upload winPEASx64.exe .
 
Info: Uploading /home/kali/archive/htb/labs/cicada/winPEASx64.exe to C:\tmp\.
Data: 3183272 bytes of 3183272 bytes copied
Info: Upload successful!

Delivery complete

Executing PEAS

LAPS

LSA Protection

Credentials Guard

Cached Creds

AV

UAC

Drives

KrbRelayUp

NTLM

Current User

AutoLogon

Execution hangs

adPEAS

*Evil-WinRM* PS C:\tmp> upload adPEAS.ps1 .
 
Info: Uploading /home/kali/archive/htb/labs/cicada/adPEAS.ps1 to C:\tmp\.
Data: 4159704 bytes of 4159704 bytes copied
Info: Upload successful!

Delivery complete

*Evil-WinRM* PS C:\tmp> . .\adPEAS.ps1
*Evil-WinRM* PS C:\tmp> Invoke-adPEAS
 
               _ _____  ______           _____
              | |  __ \|  ____|   /\    / ____|
      ____  __| | |__) | |__     /  \  | (___
     / _  |/ _  |  ___/|  __|   / /\ \  \___ \
    | (_| | (_| | |    | |____ / ____ \ ____) |
     \__,_|\__,_|_|    |______/_/    \_\_____/
                                            Version 0.8.13
 
    Active Directory Enumeration
    by @61106960
 
    Legend

Executing adPEAS

Domain

Add-Computer

Interactive Graph View

Backlinks