Record · corpus.blog/posts/01a087bf-3846-70ab-b9bb-6d05f8958b78

Domain Escalation – Backup Operator

pentestlab.blog · published 22 January 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at pentestlab.blog Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 32
Words captured: 985

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://pentestlab.blog/wp-content/uploads/2024/01/backup-operator-user-havoc.png

pentestlab.blog

https://pentestlab.blog/wp-content/uploads/2024/01/backup-operator-whoami.png

pentestlab.blog

https://twitter.com/snovvcrash

twitter.com

https://github.com/snovvcrash/RemoteRegSave

github.com

https://pentestlab.blog/wp-content/uploads/2024/01/backup-operator-regsave-access-control-list.png

pentestlab.blog

https://pentestlab.blog/wp-content/uploads/2024/01/backup-operator-regsave.png

pentestlab.blog

https://pentestlab.blog/wp-content/uploads/2024/01/backup-operator-list-files-dc.png

pentestlab.blog

https://pentestlab.blog/wp-content/uploads/2024/01/backup-operator-smb-share.png

pentestlab.blog

https://github.com/mpgn/BackupOperatorToDA

github.com

https://pentestlab.blog/wp-content/uploads/2024/01/backup-operator-backupoperatortoda.png

pentestlab.blog

https://pentestlab.blog/wp-content/uploads/2024/01/backup-operator-sam-hive.png

pentestlab.blog

https://pentestlab.blog/wp-content/uploads/2024/01/backup-operator-unc-share.png

pentestlab.blog

https://pentestlab.blog/wp-content/uploads/2024/01/backup-operator-dump-hashes.png

pentestlab.blog

https://pentestlab.blog/wp-content/uploads/2024/01/backup-operator-dump-domain-hashes.png

pentestlab.blog

https://pentestlab.blog/wp-content/uploads/2024/01/backup-operator-wmiexec.png

pentestlab.blog

https://github.com/giuliano108/

github.com

https://github.com/giuliano108/SeBackupPrivilege

github.com

https://pentestlab.blog/wp-content/uploads/2024/01/backup-operator-sebackupprivilege.png

pentestlab.blog

https://pentestlab.blog/wp-content/uploads/2024/01/backup-operator-dc-c.png

pentestlab.blog

https://pentestlab.blog/wp-content/uploads/2024/01/backupoperator-identify-backup-privilege-groups.png

pentestlab.blog

https://github.com/improsec/BackupOperatorToolkit

github.com

https://pentestlab.blog/wp-content/uploads/2024/01/backup-operator-backupoperatortoolkit.png

pentestlab.blog

https://pentestlab.blog/wp-content/uploads/2024/01/backup-operator-dump-sam.png

pentestlab.blog

https://pentestlab.blog/wp-content/uploads/2024/01/backup-operator-non-domain-joined.png

pentestlab.blog

https://pentestlab.blog/wp-content/uploads/2024/01/backup-operator-secretsdump.png

pentestlab.blog

https://pentestlab.blog/wp-content/uploads/2024/01/backup-operator-crackmapexec.png

pentestlab.blog

https://github.com/horizon3ai/backup_dc_registry

github.com

https://github.com/decoder-it/BadBackupOperator/

github.com

The power of backup operators Read at the source ↗

decoder.cloud

https://cube0x0.github.io/Pocing-Beyond-DA/

cube0x0.github.io

https://github.com/Wh04m1001/Random/blob/main/BackupOperators.cpp

github.com

https://adsecurity.org/?p=3700

adsecurity.org