PivotAPI
PivotAPI
PivotAPI 345
PivotAPI
RETIRED MACHINE

PivotAPI

PivotAPI - Windows Windows
PivotAPI - Insane Insane

4.2

MACHINE RATING

870

USER OWNS

834

SYSTEM OWNS

08/05/2021

RELEASED
Created by CyberVaca & 3v4Si0N

Machine Synopsis

Pivotapi is an insane machine that involves user enumeration through the metadata of PDFs which are downloaded from a FTP file share server. Since the user has not got preauth with Kerberos it is possible to request a TGT for him which can be cracked with Hashcat. With the provided credentials an SMB enumeration exposes an executable which when reversed engineered reveals credentials to authenticate to MSSQL. After gaining access to the system it is possible to locate a keepass database on the target, leading to further misconfiguration abuse through Active Directory which leads obtaining the Administrator's password through LAPS and thus get execution on the target through `psexec` as user Administrator.

Machine Matrix

Ready to start your
hacking journey?